feat: Implement Phase 2 cross-cutting services with email and notification enhancements

- Refactor email verification and password reset utilities to use new email service.
- Introduce email delivery queue and notification delivery model for better tracking.
- Enhance file validation and storage services for improved security and ownership management.
- Add cron job for cleaning inactive notifications with retention policy.
- Update document worker to handle document generation and storage more efficiently.
- Implement logging improvements in activity and log workers.
- Create comprehensive documentation for new API endpoints and services.
- Add unit tests for file validation and notification policies to ensure robustness.

app/routes/notification.routes.js

@@ -1,69 +1,11 @@
-/**
- * Copyright (c) 2026 Niolla
- * All rights reserved.
- *
- * This source code is proprietary and confidential.
- * Unauthorized copying, modification, distribution, or use
- * of this file, via any medium, is strictly prohibited.
- */
-
-// app/routes/notification.routes.js
-
-const express = require("express");
-const router = express.Router();
-
-const notificationController = require("../controllers/notification.controller");
-
-const {
-  authenticate,
-} = require("../middleware/auth.middleware");
-
-const {
-  authorizedAccountType,
-  checkPermission,
-} = require("../middleware/permission.middleware");
-
-const PERMISSIONS = require("../constants/permissions");
-
-
-// Create notification
-router.post(
-  "/",
-  authenticate,
-  authorizedAccountType(["admin", "management"]),
-  // checkPermission(PERMISSIONS.NOTIFICATION_CREATE),
-  notificationController.createNotification,
-);
-
-
-// Get all announcements
-router.get(
-  "/announcements",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  // checkPermission(PERMISSIONS.NOTIFICATION_VIEW),
-  notificationController.getAnnouncements,
-);
-
-
-// Get notifications for a user
-router.get(
-  "/user/:userId",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  // checkPermission(PERMISSIONS.NOTIFICATION_VIEW),
-  notificationController.getUserNotifications,
-);
-
-
-// Mark notification as read
-router.patch(
-  "/user/:userId/notification/:notificationId/read",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  // checkPermission(PERMISSIONS.NOTIFICATION_READ),
-  notificationController.markAsRead,
-);
-
-
-module.exports = router;
+const router = require("express").Router();
+const controller = require("../controllers/notification.controller");
+const { authenticate } = require("../middleware/auth.middleware");
+const { checkPermission } = require("../middleware/permission.middleware");
+router.use(authenticate);
+router.post("/", checkPermission("notifications.manage", { custom: true }), controller.createNotification);
+router.get("/announcements", controller.getAnnouncements);
+router.get("/me", controller.getMyNotifications);
+router.patch("/read-all", controller.markAllAsRead);
+router.patch("/:notificationId/read", controller.markAsRead);
+module.exports = router;