fix(notifications): enforce settings access permission

Keep notification preferences hidden and inaccessible unless the user has notification access, while preserving the demo restriction.

Fixes #1057

client/env.d.ts

@@ -1,11 +1,15 @@
 /// <reference types="vite/client" />
 
 import 'vue-router'
+import type { Permission } from '@bookorbit/types'
 import type { RouteLocationNormalizedLoaded } from 'vue-router'
 
 declare module 'vue-router' {
   interface RouteMeta {
     public?: boolean
+    requiredPermission?: Permission
+    forbiddenPermission?: Permission
+    permissionFallback?: string
     maxWidth?: string
     title?: string | ((to: RouteLocationNormalizedLoaded) => string)
   }