feat: filter digest tiles by user permissions and add import progress status

- Store UserGroups from OIDC in UserSettings entity, sync on each request
- Filter daily digest tiles based on user's permission groups
- Add in-memory job status tracking to EmailImportService
- Poll import job status in MailImportWizard and show progress in Spin tip

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

paperless-backend/src/user-settings/user-settings.service.ts

@@ -65,14 +65,15 @@ export class UserSettingsService {
     return Buffer.concat([decipher.update(encrypted), decipher.final()]).toString('utf8');
   }
 
-  async getSettings(userId: string, email?: string, preferredUsername?: string): Promise<UserSettingsDto> {
+  async getSettings(userId: string, email?: string, preferredUsername?: string, groups?: string[]): Promise<UserSettingsDto> {
     let entity = await this.repo.findOne({ where: { UserId: userId } });
-    if (email || preferredUsername) {
+    if (email || preferredUsername || groups) {
       if (!entity) {
         entity = this.repo.create({ UserId: userId });
       }
       if (email) entity.UserEmail = email;
       if (preferredUsername) entity.UserPreferredUsername = preferredUsername;
+      if (groups) entity.UserGroups = groups;
       await this.repo.save(entity);
     }
     return this.toDto(entity);
@@ -95,6 +96,7 @@ export class UserSettingsService {
     },
     email?: string,
     preferredUsername?: string,
+    groups?: string[],
   ): Promise<UserSettingsDto> {
     let entity = await this.repo.findOne({ where: { UserId: userId } });
     if (!entity) {
@@ -116,6 +118,7 @@ export class UserSettingsService {
     if (data.dailyDigestEnabled !== undefined) entity.DailyDigestEnabled = data.dailyDigestEnabled;
     if (email) entity.UserEmail = email;
     if (preferredUsername) entity.UserPreferredUsername = preferredUsername;
+    if (groups) entity.UserGroups = groups;
 
     await this.repo.save(entity);
     return this.toDto(entity);