add a new inline keyboard button labeled "report" visible only to group admins.
when the button is pressed, log the reported user's ID (the one who just joined) into a database (preferably cloudflare KV or D1).

design with future data export in mind — we'll eventually allow other groups to access the spammer database.