feat: filter digest tiles by user permissions and add import progress status

- Store UserGroups from OIDC in UserSettings entity, sync on each request
- Filter daily digest tiles based on user's permission groups
- Add in-memory job status tracking to EmailImportService
- Poll import job status in MailImportWizard and show progress in Spin tip

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

paperless-backend/src/daily-digest/daily-digest.controller.ts

@@ -8,12 +8,12 @@ export class DailyDigestController {
   @Post('send-now')
   @HttpCode(200)
   async sendNow(@Request() req: any) {
-    const { userId, email, preferredUsername } = req.user;
+    const { userId, email, preferredUsername, groups } = req.user;
     if (!email) {
       return { ok: false, error: 'Keine E-Mail-Adresse im Benutzerprofil gefunden.' };
     }
     try {
-      await this.dailyDigestService.sendDigestForUser(userId, email, preferredUsername);
+      await this.dailyDigestService.sendDigestForUser(userId, email, preferredUsername, groups);
       return { ok: true };
     } catch (err: any) {
       return { ok: false, error: err.message };