List Notifications

GET /api/v1/notifications?limit=&cursor=&include_read= The caller's inbox, newest first, excluding dismissed and expired rows.

Cursor-paged rather than page/page_size (the convention elsewhere in this API) because this is the one prepend-heavy list we serve: producers insert at the top between a client's page 1 and page 2 requests, and offset paging would then re-show rows the user already scrolled past. The cursor is an opaque (created_at, id) pair — treat it as a token, not a number.

unread_count is returned on every page so the client can reconcile its badge without a second call.