fix(notifications): skip permission request if already denied by browser

refactor(debt): resolve all 10 technical debt items from audit

feat: push notifications, CRM analytics, Fastify v5 upgrades, schema updates