fix(message): resolve Phase 5-6 audit findings

- Add missing version column to all message tables (migration + entities)
- Replace N+1 mark_all_read loop with single batch UPDATE query
- Fix NotificationList infinite re-render (extract queryFilter to stable ref)
- Fix NotificationPreferences dynamic import and remove unused Dayjs type
- Add Semaphore (max 8) to event listener for backpressure control
- Add /docs/openapi.json endpoint for API documentation
- Add permission check to unread_count handler
- Add version: Set(1) to all ActiveModel inserts

apps/web/src/pages/Messages.tsx

@@ -3,6 +3,10 @@ import { Tabs } from 'antd';
 import NotificationList from './messages/NotificationList';
 import MessageTemplates from './messages/MessageTemplates';
 import NotificationPreferences from './messages/NotificationPreferences';
+import type { MessageQuery } from '../api/messages';
+
+/** 预定义的过滤器，避免每次渲染创建新引用导致子组件无限重渲染。 */
+const UNREAD_FILTER: MessageQuery = { is_read: false };
 
 export default function Messages() {
   const [activeKey, setActiveKey] = useState('all');
@@ -21,7 +25,7 @@ export default function Messages() {
           {
             key: 'unread',
             label: '未读消息',
-            children: <NotificationList queryFilter={{ is_read: false }} />,
+            children: <NotificationList queryFilter={UNREAD_FILTER} />,
           },
           {
             key: 'templates',