Aura Sport notification server — POST /notify/test-device (FCM token only, no topics) + x-aura-notify-secret — see .env.example