feat: T4 wave 4 - rules suggest, takeover, chains, autopilot A1-A3, suggestions page, varroa bands UI

- Automation rules propose suggestions instead of creating tasks;
  notify per rule config; corrected varroa measurements refresh or
  resolve their suggestion
- Inspection values can be taken over into the colony card
  (occupiedFrames 0-40, strength deprecated); warning counts use the
  same visibility rule as the notification list
- Biotech chains: swarm check after queen cells, queen acceptance
  check, split schedules (raise own, queen cell, queen)
- Season autopilot core with A1 inspection due, A2 varroa measurement,
  A3 recheck after treatment; colony sync and daily step
- Frontend: suggestions page with groups, bulk accept, undo, paging,
  focus management and permission gating
- Frontend: varroa traffic light from seasonal bands, sample size,
  one range request for the colony chart
- Notifications: mark-read answers 404 for rows the user may no
  longer see

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Backend/test/notifications.e2e-spec.ts

@@ -150,6 +150,38 @@ describe('Notifications (e2e)', () => {
     expect(listed).not.toContain(hidden.id);
   });
 
+  it('a row the user may not see cannot be read, marked or counted', async () => {
+    const hidden = await seedNotification(ids.bare, {
+      requiredPermissions: ['colonies:read'],
+    });
+    const open = await seedNotification(ids.bare);
+
+    await request(server())
+      .post(`/api/v1/notifications/${hidden.id}/read`)
+      .set(as('bare'))
+      .expect(404);
+
+    const response = await request(server())
+      .post('/api/v1/notifications/read-all')
+      .set(as('bare'))
+      .expect(201);
+
+    expect(
+      (response.body as { updated: number }).updated,
+    ).toBeGreaterThanOrEqual(1);
+    expect(
+      (await prisma.notification.findUniqueOrThrow({ where: { id: open.id } }))
+        .read,
+    ).toBe(true);
+    expect(
+      (
+        await prisma.notification.findUniqueOrThrow({
+          where: { id: hidden.id },
+        })
+      ).read,
+    ).toBe(false);
+  });
+
   it('reading is per user: marking one copy read leaves the other unread', async () => {
     const [first, second] = await notifications.recordForUsers(
       [ids.beekeeper, ids.staff],