Returns all permission-allowed, RLS-shaped cache invalidation events strictly after
sinceSequence from the server's bounded circular ring buffer.
Invoked by GraphQLDataProvider when an HTTP response's X-MJ-Cache-Seq header or a
WebSocket reconnect reveals missed invalidation sequence numbers.
Negotiates a client broadcast connection (URL, signed token, and authorized role-bucket groups) for the active BaseCacheInvalidationBroadcastProvider.
Subscription that broadcasts cache invalidation events to connected clients, so cross-server cache invalidation reaches browsers.
Delivery is filtered by ENTITY-level read permission (see CacheInvalidationFilter) and shaped per role-fingerprint bucket (see ShapeCacheInvalidationEvent).