dedupe notification auth headers

[saurabhhhcodes]

Summary

• Extract a shared JSON auth header helper for notification requests
• Omit x-auth-token entirely when no token exists, so the server no longer sees a literal "null" header value
• Remove the duplicated header object from the four calls in NotificationListener

Validation

• git diff --check
• npm run build in frontend

[vercel]

Someone is attempting to deploy a commit to the Sunil Kumar's projects Team on Vercel.

A member of the Team first needs to authorize it.