Lightweight check for whether the milestone toast should be considered.

Distinct from /me — does not lazy-create a referral code, so calling it on every authenticated page load is cheap and doesn't clutter the DB.