core: implement deep link handling for notifications

[EmeditWeb]

Problem

Push notifications are sent but tapping them does
not navigate to the relevant screen.

What To Build

1. Configure deep linking scheme (stepfi://)
2. Notification tap navigation
3. Universal links (HTTPS)
4. Cold start handling

Files To Touch

• app.config.ts
• app/_layout.tsx
• hooks/useDeepLink.ts (new)
• services/notifications.service.ts

Acceptance Criteria

• All deep link schemes navigate correctly
• Notification tap opens correct screen
• Cold start with deep link works
• npx expo export --platform web passes

Mandatory Checks Before PR

• npx expo export --platform web passes
• Tested on physical device
• PR references this issue

[BigElv]

I would love to work on this issue

[deslawson]

i can and would love to handle this issue

[teeschima]

Hi,

I'd like to work on this issue.

My understanding is that the goal is to introduce API-key based authentication for vendor-to-server integrations, replacing the need for wallet-based JWT authentication in machine-to-machine communication.

My implementation plan would be:

• Create an api_keys table in Supabase with support for key metadata, permissions, status, timestamps, and vendor association.
• Generate cryptographically secure API keys and return the plaintext key only once during creation.
• Store only a hashed version of the key in the database.
• Implement CRUD endpoints for API key management in the vendors module.
• Create an ApiKeyGuard that validates incoming API keys and authenticates requests.
• Enforce permission scopes per key for protected vendor endpoints.
• Add unit tests covering successful authentication, invalid keys, revoked keys, and permission enforcement.
• Maintain strict TypeScript typing with no any usage.
• Verify npm run build passes before opening the PR.
• Reference this issue in the PR and include testing details.

I have experience with TypeScript, NestJS-style backend architectures, authentication systems, REST APIs, database design, and secure credential management.

Looking forward to contributing.

[grantfox-oss]

🦊 GrantFox — @BigElv has been assigned to this issue as part of the Official Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #14)
2. Your PR will be reviewed by the StepFi-app maintainers

Good luck! Track your progress on GrantFox.