- Drop all private data from push payloads: send only the already-sanitized
title/body, no data field, no MAC/IP, and no deep-link (tap just opens the app)
- Correct backend integration points: sender at src/notifications/push.rs and a
"push" arm in deliver() (not events.rs); add module registrations and an HTTP
client (reqwest) dependency
- Unify nomenclature on "push": method value "push", relay under push_relay/,
config section [notifications.push], sender module push.rs
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>