feat: Seaca mobile API, enrollment, FCM push and admin UI (0.9.0)

Adds mobile device registration by admin codes, refresh tokens, push channel
in notification policy, and Settings section for managing Seaca clients.

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/env.native.example

@@ -87,4 +87,11 @@ SAC_LOGIN_MAX_FAILURES=3
 SAC_LOGIN_FAILURE_WINDOW_MINUTES=15
 SAC_LOGIN_ALERT_TELEGRAM=true
 
+# Seaca mobile push (FCM HTTP v1)
+SAC_FCM_ENABLED=false
+SAC_FCM_PROJECT_ID=
+# Путь к JSON service account Firebase (chmod 600, владелец sac)
+SAC_FCM_SERVICE_ACCOUNT_JSON=
+SAC_MOBILE_REFRESH_EXPIRE_DAYS=90
+
 CORS_ORIGINS=*