feat: push+email notifications, recipe notes, fork/clone, pantry-aware lists, GDPR export

Five S-sized items from HANDOFF.md's new-features backlog, all wiring up
previously-orphaned infra:

- createNotification now sends web push + email for every notification type
  (follow/comment/reply/reaction/rating/mention), not just comments
- Personal recipe notes: private per-user notes on any viewable recipe
  (recipeNotes table had zero API/UI before this)
- Recipe fork/clone: deep-copies a viewable recipe into your own library as
  a private draft, linked via recipeVariations, respects tier quota
- Pantry-aware shopping lists: meal-plan-generated lists now subtract
  on-hand pantry quantities (ingredientId match, falling back to normalized
  name match) and flag partial/ambiguous matches instead of guessing
- GDPR data export: downloadable JSON of a user's own content and activity
  across every relevant table, secrets/internal tables excluded

New migrations 0025 (unique index for recipe-notes upsert) and 0026
(shopping_list_items.in_pantry) generated, left unapplied like 0023/0024.
Verified with typecheck, lint, and a full local `docker build`.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/web/app/(app)/recipes/[id]/page.tsx

@@ -14,10 +14,11 @@ import { PrintButton } from "@/components/recipe/print-button";
 import { ShareRecipeButton } from "@/components/recipe/share-recipe-button";
 import { VersionHistoryButton } from "@/components/recipe/version-history-button";
 import { DeleteRecipeButton } from "@/components/recipe/delete-recipe-button";
+import { ForkRecipeButton } from "@/components/recipe/fork-recipe-button";
 import { NutritionPanel } from "@/components/recipe/nutrition-panel";
 import { GenerateContentButton } from "@/components/recipe/generate-content-button";
 import { auth } from "@/lib/auth/server";
-import { db, recipes, ratings, favorites, avg } from "@epicure/db";
+import { db, recipes, ratings, favorites, recipeVariations, recipeNotes, avg } from "@epicure/db";
 import { and, eq, or, count, inArray } from "@epicure/db";
 import { Badge } from "@/components/ui/badge";
 import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar";
@@ -28,6 +29,7 @@ import { ServingScaler } from "@/components/recipe/serving-scaler";
 import { FavoriteButton } from "@/components/social/favorite-button";
 import { RatingStars } from "@/components/social/rating-stars";
 import { CookedItReview } from "@/components/social/cooked-it-review";
+import { RecipeNotes } from "@/components/recipe/recipe-notes";
 import { CommentsSection } from "@/components/social/comments-section";
 import { getPublicUrl } from "@/lib/storage";
 import { cn } from "@/lib/utils";
@@ -57,7 +59,7 @@ export default async function RecipePage({ params }: Params) {
   const VISIBILITY_LABEL = m.recipe.visibility;
   const DIETARY_LABELS = m.recipe.dietary;
 
-  const [recipe, ratingData, favoriteData, myRating] = await Promise.all([
+  const [recipe, ratingData, favoriteData, myRating, forkedFrom, myNote] = await Promise.all([
     db.query.recipes.findFirst({
       where: and(
         eq(recipes.id, id),
@@ -73,6 +75,14 @@ export default async function RecipePage({ params }: Params) {
     db.select({ avgScore: avg(ratings.score), total: count() }).from(ratings).where(eq(ratings.recipeId, id)),
     db.query.favorites.findFirst({ where: and(eq(favorites.userId, session.user.id), eq(favorites.recipeId, id)) }),
     db.query.ratings.findFirst({ where: and(eq(ratings.recipeId, id), eq(ratings.userId, session.user.id)) }),
+    db.query.recipeVariations.findFirst({
+      where: eq(recipeVariations.childRecipeId, id),
+      with: { parent: { columns: { id: true, title: true } } },
+    }),
+    db.query.recipeNotes.findFirst({
+      where: and(eq(recipeNotes.recipeId, id), eq(recipeNotes.userId, session.user.id)),
+      columns: { content: true },
+    }),
   ]);
 
   if (!recipe) notFound();
@@ -111,6 +121,14 @@ export default async function RecipePage({ params }: Params) {
             {formatMessage(m.recipe.byAuthor, { name: recipe.author.name })}
           </Link>
         )}
+        {forkedFrom && (
+          <Link
+            href={`/recipes/${forkedFrom.parent.id}`}
+            className="inline-flex items-center gap-1 text-sm text-muted-foreground hover:text-foreground"
+          >
+            {formatMessage(m.recipe.forkedFrom, { title: forkedFrom.parent.title })}
+          </Link>
+        )}
         <TooltipProvider>
         <div className="flex items-center gap-2 overflow-x-auto pb-0.5 [scrollbar-width:none] [-ms-overflow-style:none] [&::-webkit-scrollbar]:hidden">
             {recipe.steps.length > 0 && (
@@ -176,6 +194,7 @@ export default async function RecipePage({ params }: Params) {
                 order: s.order,
               }))}
             />
+            {!isOwner && <ForkRecipeButton recipeId={id} />}
             <ShareRecipeButton recipeId={id} visibility={recipe.visibility} />
             <PrintButton recipeId={id} />
             <ExportMarkdownButton
@@ -410,6 +429,9 @@ export default async function RecipePage({ params }: Params) {
         </>
       )}
 
+      <Separator />
+      <RecipeNotes recipeId={id} initialContent={myNote?.content ?? ""} />
+
       <RecipeChatPanel recipeId={id} recipeTitle={recipe.title} />
     </div>
   );