feat: add acl to notifications

not sure if i got all the acls of the different notifications down rn, but it seems to be about right

prisma/migrations/20250515024929_add_required_perms_to_notifications/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "Notification" ADD COLUMN     "requiredPerms" TEXT[] DEFAULT ARRAY[]::TEXT[];

prisma/models/user.prisma

@@ -34,6 +34,9 @@ model Notification {
     description String
     actions     String[]
 
+    // ACL items
+    requiredPerms String[] @default([])
+
     read Boolean @default(false)
 
     @@unique([userId, nonce])