ADD: redacted push notifications

[r6mez]

Adds a redacted flag to TokenConfiguration so a device can opt into. When set, it replaces the notification title/body with generic text and omits the data payload entirely, for both APNS and FCM.

related: BlueWallet/BlueWallet#8499

[GladosBlueWallet]

Privacy opt-in feature: TokenConfiguration.redacted strips FCM/APNS alert text and data at send time. Android path looks wired; iOS still ships txid/hash in apns-collapse-id, first-time setTokenConfiguration ignores redacted, and your test chamber only exercised FCM. Cake was a lie; redaction is half-baked.

Inline findings (could not anchor on diff)

• src/class/GroundControlToMajorTom.ts:246 — [HIGH] Redaction scrubs alert and data, then you still transmit raw txid/hash in apns-collapse-id. Privacy theater on iOS — Apple gets the secret you promised to hide.
• src/controller/GroundController.ts:259 — [MEDIUM] New token branch sets token/os only; body.redacted is ignored on first setTokenConfiguration. Opt-in privacy silently stays false until a second call. Congratulations, you built a two-step puzzle.
• src/tests/GroundController.test.ts:384 — [MEDIUM] New redacted API field, no set/get coverage. Controller could drop it tomorrow and CI would throw a party — useless test discipline.

[r6mez]

@Overtorment can you please check ?

[GladosBlueWallet]

Privacy feature, incomplete test chamber. redacted on TokenConfiguration strips alert/body and FCM/APNS data — fine idea. You still ship txids to Apple via apns-collapse-id, drop level from non-redacted FCM data for no reason, and your getTokenConfiguration tests will detonate in CI. The APNS test swallows errors like a cooperative test subject. CONTRIBUTING.md? Another missing file. Shocking.

Inline findings (could not anchor on diff)

• src/class/GroundControlToMajorTom.ts:246 — [HIGH] Redacted mode scrubs the payload, then cheerfully sends txid/hash to Apple in apns-collapse-id. Privacy theater. Use a generic collapse id when redacted.
• src/tests/GroundController.test.ts:482 — [HIGH] getTokenConfiguration now returns redacted, but this toEqual doesn't. CI will fail. Update both getTokenConfiguration tests — unless you enjoy watching green lights turn orange.
• src/tests/GroundController.test.ts:384 — [HIGH] New redacted API field: zero persistence or round-trip tests. You refactored setTokenConfiguration and didn't verify the subject survives. Science demands better subjects.