The junk judge: releases judged by what their probes showed; verdicts hide them

Voyager 1's second filter (D42) for voyager 2. Hourly, in order (the first
rule wins): dead (every probed first article gone), fake (a film, episode or
music name whose content is a program: archive entries all executables, or
the file itself by name or sniffed exe), repeated (the same first 16 KiB and
size in 20+ releases), locked (passworded, no password known), unusable
(random names, no inner name, no merge, no spot, a day after settling).
Verdicts in release_verdicts (rule, version) hide releases from search
(judged shows them); a verdict whose rule no longer matches is taken back.
Nothing dropped yet. Service judge; releases:judge --once --dry counts.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

deploy/compose.yaml

@@ -122,6 +122,13 @@ services:
     command: ['node', 'ace', 'releases:merge']
     volumes: []
 
+  # The junk judge: releases judged hourly by what their probes showed (dead, fake, repeated, locked, unusable);
+  # verdicts hide them from search. No NNTP.
+  judge:
+    <<: *app
+    command: ['node', 'ace', 'releases:judge']
+    volumes: []
+
   # Spotnet: the spotter reads free.pt's spots (verified, with the passwords
   # they name) into the spots table; the spot inspector reads each spot's NZB,
   # lists its files and links the releases they match. One connection each.