Notifications: events, rules, delivery

[martian56]

Detect critical events and route them by rule.

• Detect critical events from findings and webhooks
• Evaluate per-account rules
• In-app feed first, then channel delivery; add dedup and cooldown