Mark a notification as read.

The lookup is scoped to the authenticated traveler so notifications
belonging to other travelers cannot be marked. Idempotent: marking an
already-read notification returns the row without changing read_at.

MER-900: when the notification carries a trigger_key, all pending
outbox rows and scheduled-notification rows with the same key are
soft-cancelled in the same transaction to prevent stale follow-up alerts.