Redis pub/sub replaces SSE polling

The /api/notifications/stream SSE endpoint now subscribes to a per-user Redis channel via Upstash when UPSTASH_REDIS_REST_URL is configured. publishToUser() is called after every prisma.notification.create(). Graceful fallback to 4s DB polling when Redis is unavailable. The notification bell shows a yellow dot when in poll mode.