One-time data repairs for installs that predate a change here. Core calls this on every boot, so each repair carries its own "already done" flag and runs exactly once.

• projects.admin_all is granted to every role that already holds the base projects key, preserving the pre-split behavior.
• Projects carrying the old, incomplete "simple to-do list" preset get the three flags that preset should always have turned off.

Both are deliberately one-way and one-time: re-deciding on every boot would fight the Owner, handing back a permission they revoked or re-disabling a feature they turned on.

Notification preference types (Step 7 of the hub rework): the actions below fan out through core's activity→notification bridge whenever their entries carry a target_uuid (the affected user — assignees on task actions, the member on membership actions). Users tune each sub-type — and its Email/Telegram routing — in their notification preferences.