fix(iv): suppress anonymous ops at enqueue under IV-required

Add shouldSuppressAnonymousOp from reference branch #2599: any non-
LoginUserOperation enqueued without an externalId is dropped at the
enqueue boundary when useIdentityVerification == REQUIRED, since it
can't authenticate and would otherwise sit in the queue forever blocked
by hasValidJwtIfRequired. LoginUserOperation is exempt — it's enqueued
intentionally during logout and purged later by
removeOperationsWithoutExternalId if needed.

Outer-gated on _identityVerificationService.newCodePathsRun so Phase 1
customers stay byte-for-byte on the legacy enqueue path.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: nan-li

OneSignalSDK/onesignal/core/src/main/java/com/onesignal/core/internal/operations/impl/OperationRepo.kt

@@ -135,6 +135,8 @@ internal class OperationRepo(
         operation: Operation,
         flush: Boolean,
     ) {
+        if (shouldSuppressAnonymousOp(operation)) return
+
         Logging.log(LogLevel.DEBUG, "OperationRepo.enqueue(operation: $operation, flush: $flush)")
 
         operation.id = UUID.randomUUID().toString()
@@ -147,6 +149,8 @@ internal class OperationRepo(
         operation: Operation,
         flush: Boolean,
     ): Boolean {
+        if (shouldSuppressAnonymousOp(operation)) return false
+
         Logging.log(LogLevel.DEBUG, "OperationRepo.enqueueAndWait(operation: $operation, force: $flush)")
 
         operation.id = UUID.randomUUID().toString()
@@ -157,6 +161,26 @@ internal class OperationRepo(
         return waiter.waitForWake()
     }
 
+    /**
+     * Drop anonymous (externalId == null) operations at enqueue time when IV is required —
+     * they cannot be authenticated and would otherwise sit in the queue forever, blocked by
+     * `hasValidJwtIfRequired`. LoginUserOperation is exempt because it's enqueued
+     * intentionally during logout and purged later by [removeOperationsWithoutExternalId]
+     * if needed. Outer-gated on `newCodePathsRun` so Phase 1 customers stay byte-for-byte
+     * on the legacy enqueue path.
+     */
+    private fun shouldSuppressAnonymousOp(op: Operation): Boolean {
+        if (!_identityVerificationService.newCodePathsRun) return false
+        if (op is LoginUserOperation) return false
+        val suppress =
+            _configModelStore.model.useIdentityVerification == JwtRequirement.REQUIRED &&
+                op.externalId == null
+        if (suppress) {
+            Logging.debug("OperationRepo: suppressing anonymous op under IV-required: $op")
+        }
+        return suppress
+    }
+
     /**
      * Only used inside this class, adds OperationQueueItem to queue
      * WARNING: Never set flush=true until budget rules are added, even for internal use!