push.Sender implements notify.Sender for the "push" channel with
webpush-go and the VAPID key pair: it sends {title, body, url, tag} to
every stored subscription with a TTL of 12 hours, one request each.
Per subscription, an accepted notification records last_success_at, any
failure increments failure_count, and a 404 or 410 deletes the
subscription. Send succeeds when one device accepted it or when there
are no subscriptions (logged as nothing to send); otherwise it returns
an error so the outbox retries. Errors and logs name subscriptions by
id; a transport *url.Error is unwrapped so the endpoint is never quoted.
A mailto: VAPID subject is passed to webpush-go as its bare address,
since webpush-go prefixes mailto: itself.
The server registers the sender with the notify service.
Maestro task 32a1a4ad-9221-46de-8468-3ffce19b108c.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>