* Invenio-Config already takes care of checking the value in real
  Invenio applications and issues a warning if it's unset

* previously, our configuration magic was performed as part of the
  `finalize_app` entrypoint
* while this worked well enough for most use cases, some extensions
  would break this model by caching values during their initialization
* especially caching-related extensions like to take eagerly create
  clients with the current configuration items, which are hard to fix
  afterwards
* keeping track of all the instantiated clients just to change their
  connection details when we perform our magic really didn't seem like
  a good approach
* so instead, we now made sure that our extension is loaded first and
  can thus perform its configuration magic before any other extension
  has a chance of caching values
* also, extension loading happens after the configuration loading is
  done (especially the handling of environment variables)

* since we're not quite ready for matrix notifications yet, this wasn't
  supposed to be added to the code

* add functionality to assemble some config items (like the DB
  connection string) from their parts
* this was previously implemented in our `invenio.cfg`, but more flaky
  because it had to deal with parsing and setting environment variables
* also refactor the startup module

* sometimes the cleanup operations for failed file uploads seem to leave
  over some `FileInstance` entries in the database that have a null URI
* these file instances cause the periodic health checks to fail and
  trigger warning emails

* this enables users to set an alternative email address to which
  notifications will be sent, in case they don't like to use their
  institutional email address

* this can be very useful for having a single project that is used for
  both "local" and "containerized" execution, where some configuration
  items should be slightly different for either (e.g. `SEARCH_HOSTS`)
* currently we have this functionality implemented in our `invenio.cfg`
  but there it is a bit awkward due to the fact that environment
  variables have not been translated into `app.config` yet

* this brings it more in line with the request notifications
* previously we were restricted to emails, now it will be whatever
  notification backends we use
* also remove the mail templates - they now live in code until we
  enhance the notification backend to be more flexible w.r.t. the
  rendered templates

* previously, the global was still set to the original Flask config
  which may not be in sync with the overridden config and thus cause
  unexpected behavior

* forward extra arguments to pybabel
* add missing fixed argument to "extract"
* provide better usage information

* because otherwise, `url_for()` will prefer that value over the HTTP
  Host header value
* this causes issues for us with our multi-domain setup, in conjunction
  with the OIDC redirects - given that `SERVER_NAME` can only be a
  scalar value, trying to login on a secondary domain will redirect to
  the primary one and typically fail (because sessions are different, etc.)
* also make sure that the `APP_ALLOWED_HOSTS` config contains the
  `SERVER_NAME` if set

* apparently it was a leftover `before_first_request` handler
* reworked it as `finalize_app` entrypoint
* also, added a check if the app config is already a TUW config to avoid
  unnecessary nesting

* to fix our multi-domain setup with Flask 2.x and 3.0
* see: https://github.com/pallets/flask/pull/5634
* this can be removed once we get Flask 3.1+ in

* create dedicated modules for curations & notifications to separate the
  general notifications infrastructure from the curations-related parts
  (and requests)
* split large modules into smaller logical groups
* split tasks.py into three separate parts: curations, TISS, and general

* automatic accept of submissions for the test system
* reminder for uploaders about accepted but still unpublished records
* reminder for reviewers about open curation requests

* to support our notification use-cases

* to add custom headers that can be used for automatic mail processing
  rules

* also start kicking out infrastructure for the "trusted-publisher" role
  which hasn't been used in a good while now
* instead, if curation isn't enabled, it's up to the admins to publish
  records

* to make it more obvious that they are all related to user models
* also, rename the modules to better reflect their content
* also, rename some content (e.g. `CurationForm` to `CurationPreferencesForm`)

* they come in handy for the tests, to avoid a dependency on
  Invenio-Theme-TUW

* account for the fact that several TISS profiles can have the smae
  ORCID listed
* also, the `names_svc.update()` method seems broken currently

* replace the removed `@register_menu` decorator, which was using
  `app.before_first_request` under the hood, with a `finalize_app`
  entrypoint function

* apparently, `app` was sometimes not available before