feat(F-G-H-I): STL cache, invoices, import validation, notification settings

Phase F — STL Hash Cache:
- Migration 041: step_file_hash column on cad_files
- cache_service.py: SHA256 hash + MinIO-backed STL cache (check/store)
- render_step_thumbnail: compute+persist hash before render
- generate_stl_cache: check MinIO cache before cadquery conversion, store after

Phase G — Invoices:
- Migration 042: invoices + invoice_lines tables with RLS
- Invoice/InvoiceLine models + schemas
- billing service: generate_invoice_number (INV-YYYY-NNNN), create/list/get/delete/PDF
- WeasyPrint PDF generation; backend Dockerfile + pyproject.toml deps
- invoice_router with 6 endpoints; registered in main.py
- frontend: Billing.tsx page + api/billing.ts; route + nav link

Phase H — Import Sanity Check:
- Migration 043: import_validations table
- ImportValidation model + schemas
- run_sanity_check: material fuzzy-match (cutoff=0.8), STEP availability, duplicate detection
- validate_excel_import Celery task (queue: step_processing)
- uploads.py: create ImportValidation on /excel, fire task, expose GET /validations/{id}
- frontend: Upload.tsx polling ValidationDialog with Ampel status indicators

Phase I — Notification Settings:
- Migration 044: notification_configs table (user×event×channel toggles)
- NotificationConfig model + seeds (in_app=true, email=false)
- get/upsert/reset config endpoints on /notifications/config
- frontend: NotificationSettings.tsx page + api/notifications.ts extensions

Infrastructure:
- docker-compose.yml: add worker-thumbnail service (concurrency=1, Q=thumbnail_rendering)
- Fix Dockerfile: libgdk-pixbuf-2.0-0 (correct Debian bookworm package name)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/alembic/versions/044_notification_configs.py

@@ -0,0 +1,56 @@
+"""Add notification_configs table.
+
+Revision ID: 044
+Revises: 043
+"""
+import sqlalchemy as sa
+from alembic import op
+from sqlalchemy.dialects.postgresql import UUID
+
+revision = '044'
+down_revision = '043'
+branch_labels = None
+depends_on = None
+
+# Standard events
+EVENTS = [
+    "order.submitted",
+    "order.completed",
+    "render.completed",
+    "render.failed",
+    "excel.imported",
+]
+
+
+def upgrade():
+    op.create_table(
+        'notification_configs',
+        sa.Column('id', UUID(as_uuid=True), primary_key=True, server_default=sa.text('gen_random_uuid()')),
+        sa.Column('user_id', UUID(as_uuid=True), sa.ForeignKey('users.id', ondelete='CASCADE'), nullable=False),
+        sa.Column('event_type', sa.String(100), nullable=False),
+        sa.Column('channel', sa.String(20), nullable=False),
+        sa.Column('enabled', sa.Boolean, nullable=False, server_default='true'),
+        sa.Column('created_at', sa.DateTime, nullable=False, server_default=sa.text('NOW()')),
+    )
+    op.create_index('ix_notification_configs_user', 'notification_configs', ['user_id'])
+    op.create_unique_constraint(
+        'uq_notification_config_user_event_channel',
+        'notification_configs',
+        ['user_id', 'event_type', 'channel']
+    )
+    # Seed defaults for admin user (in_app=true, email=false)
+    for event in EVENTS:
+        op.execute(f"""
+            INSERT INTO notification_configs (user_id, event_type, channel, enabled)
+            SELECT id, '{event}', 'in_app', true FROM users WHERE role = 'admin'
+            ON CONFLICT DO NOTHING
+        """)
+        op.execute(f"""
+            INSERT INTO notification_configs (user_id, event_type, channel, enabled)
+            SELECT id, '{event}', 'email', false FROM users WHERE role = 'admin'
+            ON CONFLICT DO NOTHING
+        """)
+
+
+def downgrade():
+    op.drop_table('notification_configs')