implemented an E2E-encrypted Nextcloud push-v2 notification system with support for RSA decryption and signature verification; introduced an iOS Notification Service Extension and native AppDelegate handlers for Talk actions (inline reply and mark-as-read); replaced the legacy notification registration with a new lifecycle managing app passwords and secure keypair storage; added background message handling with tray synchronization and a test notification utility in the settings.

lib/state/app/modules/capabilities/bloc/capabilities_cubit.dart

@@ -13,6 +13,8 @@ class CapabilitiesCubit extends HydratedCubit<CapabilitiesState> {
 
   bool get canViewForeignTimetables => state.viewForeignTimetables;
 
+  bool get canReceivePushNotifications => state.pushNotifications;
+
   /// Refreshes capabilities from the server. On any failure (endpoint not yet
   /// live, network error, 4xx) the previously hydrated flags are kept but the
   /// state is marked `loaded` — a failed fetch never silently grants a
@@ -23,6 +25,7 @@ class CapabilitiesCubit extends HydratedCubit<CapabilitiesState> {
       emit(
         CapabilitiesState(
           viewForeignTimetables: response.viewForeignTimetables,
+          pushNotifications: response.pushNotifications,
           loaded: true,
         ),
       );