Per-row last-write metadata for building "unseen changes" UI

Shared collection rows now carry updatedAt and updatedBy end to end, so apps can badge rows that have changed since a viewer last saw them. Anonymous, link-grant, and scheduled writes intentionally leave updatedBy unset so per-viewer "unseen" logic can't be fooled by system-attributed writes.