Report a recording: per-voice review link, desk, and lifecycle

Every recording card links to /report/<digest>. Filing opens a
redoal_reports record; the Reports desk decides — Remove it acts for
real (the relay deletes the recording everywhere), Keep it closes
with the voice in place. Pins portal v0.3.17 for markdown in cards.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y42TyF8Zu7NGRR2893vNcZ

aggregates.yaml

@@ -26,3 +26,15 @@ aggregates:
     transitions:
       pending: [open, unsubscribed]
       open: [unsubscribed]
+  # Reports on recordings. The relay watches this bucket: a record
+  # moved to "removed" deletes the recording from its store, the varde
+  # pin, and discovery. "kept" closes the report with the recording in
+  # place. Decisions are human, never automatic.
+  - bucket: redoal_reports
+    initial: open
+    states:
+      open: { event: reported }
+      removed: { event: removed }
+      kept: { event: kept }
+    transitions:
+      open: [removed, kept]