comment & throws per @cscheid's comments
use .notebook for publish and stars getters/setters
filter notebooks by visibility on server side

make visibility only settable by owner
change it to a flag called `visible`, to avoid confusion with `public` flag