Digest emails and webhooks get queue-backed retry per recipient

Changed

• Digest email delivery and webhook release fan-out are now queue-backed — each recipient gets an independent retry budget so a transient failure no longer silently drops messages.