Client push-token acquisition is now fully configured; a real browser session (logged-in user granting notification permission) is needed to mint the first token. Backend delivery still needs the service-account JSON. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>