Process inbox

Role

REQUIRED: read sibling ROLE.md (secretary default, grant rule, hybrid ban, config paths).

Recipe

For each note with processed: false: