feat(activity): per-tenant audit feed in notification dropdown

activity_events records booking lifecycle transitions with the actor
behind each change — staff (dashboard), customer (self-service), or
system (auto-promotion). The notification dropdown leads with the real
feed instead of derived recent-booking guesses.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

apps/frontend/src/routes/dashboard/layout.tsx

@@ -379,7 +379,7 @@ function DashboardShell(props: { children: JSX.Element }) {
         <div class="lg:hidden bg-canvas/80 backdrop-blur-xl border-b border-border p-4 flex items-center justify-between sticky top-0 z-40">
           <DashboardLogo />
           <div class="flex items-center gap-2">
-            <NotificationDropdown bookings={data.normalizedAllBookings()} billing={data.resolvedBilling()} />
+            <NotificationDropdown bookings={data.normalizedAllBookings()} billing={data.resolvedBilling()} token={data.token} />
             <button onClick={() => setIsMobileMenuOpen(true)} aria-label={data.i18n.locale() === "cs" ? "Otevřít menu" : "Open menu"} class="p-2 hover:bg-canvas-subtle rounded-xl transition-all">
               <MenuIcon />
             </button>

apps/frontend/src/routes/dashboard/overview-page.tsx

@@ -32,7 +32,7 @@ function OverviewPage() {
             {data.i18n.t("dashboard.shareManage")}
           </button>
           <span class="text-sm text-ink-subtle hidden sm:inline">{new Date().toLocaleDateString(data.i18n.locale() === "cs" ? "cs-CZ" : "en-US", { weekday: "long", month: "long", day: "numeric", hour: "2-digit", minute: "2-digit" })}</span>
-          <NotificationDropdown bookings={data.normalizedAllBookings()} billing={data.resolvedBilling()} />
+          <NotificationDropdown bookings={data.normalizedAllBookings()} billing={data.resolvedBilling()} token={data.token} />
         </div>
       </div>