Recent changes

Add comments to devlogs and ship requests

Implement polymorphic Comment model with CommentsController,
Stimulus-driven collapsing comment box, markdown preview form,
and styles. Comments will be rendered by Turbo frames and allow
editing by owner/admin.

This is what else is included in this change:

• Encryption of hackclub_access_token and hackclub_refresh_token
  through ActiveRecord encryption, including config, env sample
  and migration task for already existing non-encrypted tokens.
• SSL enforcement in production (assume_ssl, force_ssl).
• Update filter_parameters to strip out sensitive information
  and OAuth tokens from logs.
• Fix ExchangeRate API call to include Bearer authentication header.
• Sanitization of devlogs HTML output through SafeListSanitizer.
• Update Design#can_make_devlog to can_make_devlog? method and
  restrict can_ship? check to devlogs without ship request.
• Add SRI integrity attribute to marked/DOMPurify scripts loaded
  from CDNs.
• UI improvements: styles for disabled buttons, utility class
  for hover-underline effect, devlog cards layout and info icons.