Add approval catch-up notifications and inbox priority

[crypt0rr]

What changed

• Add transactional catch-up notification recovery for explicit evidence and provider approvals.
• Preserve existing events and discarded holds, enforce ownership/preferences, and wait for unresolved blocking evidence issues before releasing evidence holds.
• Prioritize unread and expired-snooze inbox items, and return to page one after marking an item read while preserving filters.
• Document the v0.46.0 behavior and validation expectations.

Why

Approving a source conflict could previously release a hold without creating an event when no earlier event existed, causing users to miss a release. Inbox pagination could also leave the next unread item off-screen after marking an item read.

Validation

• go test ./... -count=1
• go test -race ./... -count=1
• go vet ./...
• make fmt-check tooling-check version-check VERSION=0.46.0
• lint and vulnerability checks
• Docker test/runtime builds and container smoke tests