Don't return inbox msgs with _cio prefixed topics by default

[clabland]

Don't return messages with _cio prefixed topics unless explicitly requested; we will be using this topic prefix internally.

---

Note

Medium Risk
Changes inbox message filtering semantics, which may affect which messages clients see and how counts are computed. Risk is mitigated by targeted logic and new unit tests covering default, topic-filtered, and update-stream behavior.

Overview
Updates inbox topic filtering so messages with topics prefixed by '_cio' are excluded by default (including from total()/totalUnopened() and onUpdates) unless a requested topic list includes a '_cio*' topic.

Adds a Jest test suite for createInboxAPI to validate the new _cio-prefix behavior for no topics, non-_cio topics, and explicitly requested _cio topics (including mixed-topic messages).

^{Written by Cursor Bugbot for commit 09d2075. This will update automatically on new commits. Configure here.}