feat(notes): make incoming-note popup attention-grabbing

Task #409: incoming notes now mirror UpcomingMeetingAlert's attention model
so recipients can't miss them.

Changes:
- DB: add `notification_sound_note` (default "knock"), `notify_notes_enabled`,
  `vibration_enabled_note` to users schema; pushed via drizzle.
- API spec: add 3 new fields to AuthUser + UpdateNotificationPreferencesBody;
  regenerated codegen.
- Auth route: include new fields in buildAuthUser + PATCH allowlist.
- Socket hook: play notification sound + vibrate on `note_received`,
  gated by mute/notifyNotesEnabled/socket warmup, with playedNoteIdsRef
  dedupe (mirrors upcoming-meeting-alert playedRef).
- IncomingNotePopupContext: enqueue() now returns boolean acceptance so
  the socket hook can suppress sound on own-note/duplicate.
- Popup visual: z-[110], ring-4 amber, shadow-2xl, animate-in zoom,
  avatar animate-ping pulse.
- Settings UI: refactored to SLOT_KEYS map, added 3rd "Notes" slot tab
  (grid-cols-3) with enabled/vibration toggles + sound picker.
- Locales en/ar: added notifSettings.slot.note, notesEnabled, vibrationNote.

Pre-existing typecheck errors in executive-meetings.ts (font settings
scope) are unrelated to this task.

lib/db/src/schema/users.ts

@@ -16,10 +16,13 @@ export const usersTable = pgTable("users", {
   isActive: boolean("is_active").notNull().default(true),
   notificationSoundOrder: varchar("notification_sound_order", { length: 30 }).notNull().default("ding"),
   notificationSoundMeeting: varchar("notification_sound_meeting", { length: 30 }).notNull().default("chime"),
+  notificationSoundNote: varchar("notification_sound_note", { length: 30 }).notNull().default("knock"),
   notifyOrdersEnabled: boolean("notify_orders_enabled").notNull().default(true),
   notifyMeetingsEnabled: boolean("notify_meetings_enabled").notNull().default(true),
+  notifyNotesEnabled: boolean("notify_notes_enabled").notNull().default(true),
   vibrationEnabledOrder: boolean("vibration_enabled_order").notNull().default(true),
   vibrationEnabledMeeting: boolean("vibration_enabled_meeting").notNull().default(true),
+  vibrationEnabledNote: boolean("vibration_enabled_note").notNull().default(true),
   notificationsMuted: boolean("notifications_muted").notNull().default(false),
   createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow().$onUpdate(() => new Date()),