Add notification preferences and alternate dues payment options

Notification preferences (migration 048):
- Per-member opt-out of muteable categories (bookings, classes, forms,
  admin alerts); billing is always-on. Opt-out model, default on.
- Dispatcher reads prefs and marks muted outbox rows 'skipped' instead
  of sending; pure isMuted logic, fail-open on a prefs lookup error.
- notification_preferences table (default-deny RLS); /me toggles and
  self-view via validated service-client actions.

Alternate dues payment methods (migration 049):
- Admin sets external pay-here URLs per platform (PayPal/Zeffy/Venmo)
  in /settings; members see active ones on /me and pay off-platform;
  the treasurer reconciles manually (platform pre-tagged). https-only.
- dues_payment_methods table (SELECT space member, write admin/board).

/me visual pass:
- Restore the chip/preset profile editor (skills/interests/willing-to/
  affiliations); promote ChipInput and presets to shared modules.
- Gate the Stripe pay-dues button on whether the space has Stripe
  configured; show external links or a contact-admin note otherwise.

lib/actions/notifications.ts

@@ -1,8 +1,15 @@
 'use server'
 
+import { revalidatePath } from 'next/cache'
 import { createClient } from '@/lib/supabase/server'
 import { createAdminClient } from '@/lib/supabase/admin'
 import { requireMember } from '@/lib/auth-helpers'
+import { notificationPreferenceSchema } from '@/lib/validations'
+import {
+  MUTEABLE_CATEGORIES,
+  type NotificationCategory,
+  type PrefMap,
+} from '@/lib/notifications-prefs-logic'
 
 // The caller's own notification history. The notifications RLS SELECT is
 // admin/board/treasurer only (mirrors member_billing), so the member
@@ -32,3 +39,63 @@ export async function getMyNotifications() {
     })),
   }
 }
+
+// The caller's own notification preferences as a category -> enabled map.
+// notification_preferences has no client policy (same convention as
+// notifications / member_billing), so the read goes through the service client
+// scoped to the caller's own member row. Absent categories are the default
+// (enabled); only muteable categories are ever stored or returned.
+export async function getMyNotificationPreferences(): Promise<{ data: PrefMap } | { error: string }> {
+  const supabase = await createClient()
+  const auth = await requireMember(supabase)
+  if (!auth.ok) return { error: auth.error }
+  const { member } = auth
+
+  const { data } = await createAdminClient()
+    .from('notification_preferences')
+    .select('category, enabled')
+    .eq('space_id', member.space_id)
+    .eq('member_id', member.id)
+
+  const prefs: PrefMap = {}
+  for (const c of MUTEABLE_CATEGORIES) prefs[c] = true
+  for (const row of data ?? []) {
+    const cat = row.category as NotificationCategory
+    if ((MUTEABLE_CATEGORIES as readonly NotificationCategory[]).includes(cat)) {
+      prefs[cat] = row.enabled as boolean
+    }
+  }
+  return { data: prefs }
+}
+
+// Set one muteable category on/off for the caller. Billing is never settable
+// (the Zod enum excludes it). Upserts the caller's own row through the service
+// client; the (space_id, member_id, category) PK makes a re-toggle idempotent.
+export async function setMyNotificationPreference(input: {
+  category: string
+  enabled: boolean
+}): Promise<{ ok: true } | { error: string }> {
+  const supabase = await createClient()
+  const auth = await requireMember(supabase)
+  if (!auth.ok) return { error: auth.error }
+  const { member } = auth
+
+  const parsed = notificationPreferenceSchema.safeParse(input)
+  if (!parsed.success) return { error: 'Invalid notification preference' }
+
+  const { error } = await createAdminClient()
+    .from('notification_preferences')
+    .upsert(
+      {
+        space_id: member.space_id,
+        member_id: member.id,
+        category: parsed.data.category,
+        enabled: parsed.data.enabled,
+      },
+      { onConflict: 'space_id,member_id,category' },
+    )
+  if (error) return { error: 'Could not save preference' }
+
+  revalidatePath('/me')
+  return { ok: true }
+}