[Duang777]

Summary

• project committed Agent state events into a separate durable notification database with cursor recovery, outbox leases, debounce, and visible-browser suppression
• deliver metadata-only Blocked notifications through VAPID Web Push or ntfy, behind authenticated subscription and presence APIs
• add PWA subscription controls, notification deep links, embedded production assets, and remote-access/setup documentation

Verification

• go test ./internal/notify ./internal/store ./internal/api ./internal/daemon -race -count=1
• go vet ./...
• make build
• scripts/check-workspace-platforms.sh
• npm --prefix web run typecheck
• npm --prefix web run test -- --run (64 tests)
• npm --prefix web run build
• DROVE_E2E_USE_SYSTEM_CHROME=1 npm --prefix web run test:e2e (3 scenarios)
• git diff --check

go test ./... -race -count=1 passed every package except internal/workspace, whose existing 239-test suite reached Go's 10-minute package timeout after 605 seconds. The interrupted test passed alone under the race detector in 7.9 seconds; this PR does not change internal/workspace.

Production-provider delivery remains to be checked on Android Chrome, desktop Firefox, and an installed iOS PWA because those devices and credentials are unavailable locally.

Closes #27