The journal is the source of truth; pending notifications are a derived cache
re-synced after every journal edit, on session delete and once at launch
(after sessions load). Permission is asked the first time a reminder is set,
never at launch. Reminder times are whole minutes so the card is due the
moment the banner fires. Delivered banners for closed loops are removed.

Engine version 1.3.0 to match the app release line.