automod visual auto-labeling, and abusive image scanning (#520)
This is just porting over existing auto-labeling stuff from appview in
to the automod framework.
New engine-level supporting features:
- new "blob" rule function type
- ruleset fetches blobs from upstream PDS, if necessary
- `Effects` can track blob-level takedowns (CDN purges) as part of
record takedowns