Merge pull request 'Validate proofing for all activities' (#851) from prevent-spoof into main

Reviewed-on: https://git.joinplu.me/Plume/Plume/pulls/851

plume-common/src/activity_pub/inbox.rs

@@ -231,9 +231,6 @@ where
     fn is_spoofed_activity(actor_id: &str, act: &serde_json::Value) -> bool {
         use serde_json::Value::{Array, Object, String};
 
-        if act["type"] != String("Create".to_string()) {
-            return false;
-        }
         let attributed_to = act["object"].get("attributedTo");
         if attributed_to.is_none() {
             return false;