fix(message): resolve Phase 5-6 audit findings

- Add missing version column to all message tables (migration + entities)
- Replace N+1 mark_all_read loop with single batch UPDATE query
- Fix NotificationList infinite re-render (extract queryFilter to stable ref)
- Fix NotificationPreferences dynamic import and remove unused Dayjs type
- Add Semaphore (max 8) to event listener for backpressure control
- Add /docs/openapi.json endpoint for API documentation
- Add permission check to unread_count handler
- Add version: Set(1) to all ActiveModel inserts

apps/web/src/pages/messages/NotificationPreferences.tsx

@@ -1,6 +1,6 @@
 import { useEffect, useState } from 'react';
 import { Form, Switch, TimePicker, Button, Card, message } from 'antd';
-import type { Dayjs } from 'dayjs';
+import client from '../../api/client';
 
 interface PreferencesData {
   dnd_enabled: boolean;
@@ -15,7 +15,6 @@ export default function NotificationPreferences() {
 
   useEffect(() => {
     // 加载当前偏好设置
-    // 暂时使用默认值，后续连接 API
     form.setFieldsValue({
       dnd_enabled: false,
     });
@@ -31,8 +30,6 @@ export default function NotificationPreferences() {
         dnd_end: values.dnd_range?.[1]?.format('HH:mm'),
       };
 
-      // 调用 API 更新偏好
-      const client = await import('../../api/client').then(m => m.default);
       await client.put('/message-subscriptions', {
         dnd_enabled: req.dnd_enabled,
         dnd_start: req.dnd_start,