ws-push worker
Endpoints:
  GET /ws          → WebSocket connection (client)
  GET /stats       → Connection stats (needs x-admin-key)
  GET /push        → Manual push trigger (needs x-admin-key)
  GET /start       → Bootstrap alarm after deploy (needs x-admin-key)