Push when keys exist

APNs and FCM only when host secrets are set — never fake push success.

Native push uses APNs or FCM only when those secrets are configured on the host. Local and CI builds still create in-app Notification rows.

Kumir never invents a successful push delivery without a provider. In-app unread counts work without APNs/FCM.