fix(terms,docs,notifications,support): enforce current terms version, guard statement downloads, consolidate notification modules, drop duplicate support tree

[monique-7arch]

Addresses the four issues assigned to this account.

• [Wave 200pts] FIX: TermsController.accept lets clients supply an arbitrary version string instead of the server's current terms version #1133 terms: the accept endpoint no longer trusts a client-supplied version — acceptance is always recorded against the server's current terms version (TermsAcceptanceService defaults to currentVersion() when none is provided).
• [Wave 200pts] FIX: DocumentsController serves hardcoded fake PDF data with no ownership check, duplicating the real StatementsController #1134 documents: statement PDF download now requires JWT auth and verifies the authenticated user owns the requested userId, closing the cross-user download hole.
• [Wave 200pts] REFACTOR: Consolidate three overlapping notification subsystems into one coherent module #1135 notifications: push, device registration, batching/listener, and preferences are now wired together under a single NotificationsModule (previously PushModule was not registered anywhere).
• [Wave 200pts] REFACTOR: src/support is a duplicate, unwired SupportTickets tree shadowing the live src/modules/support-tickets #1136 support: removes the duplicate src/support tree; AdminModule/AdminService/admin spec now reference the live modules/support-tickets entity, so admin supports stats still compile and run against the real table.

Closes #1133
Closes #1134
Closes #1135
Closes #1136

[drips-wave]

@monique-7arch Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits