Phase 0 — does iOS Web Push actually work?

Real test: do step 1+2, then lock the phone and have someone open /api/send-test from a laptop. A banner on the locked screen = PASS.