Wire optional mediaservice-push secret for FCM/APNs credentials

Shipped

July 16, 2026 at 2:05 AM UTC

Author

Kamo

Commit

98904a0

Mounts the FCM service-account JSON + APNs .p8 from an optional `mediaservice-push` secret at /etc/kamo/push and sets the APNs key-id/team-id from the same secret. All optional, so the pod starts unchanged until the secret is provisioned; both senders already disable gracefully when the files/keys are absent. Once the secret exists, a rollout restart activates push with no code change.