Create notification settings during boot if missing

User lockout during boot if Notification Settings doc is missing; auto-creates it on first read with rollback safety.