Take only acknowledgements from a desk click, and make each answer a one-time ticket

Review found that any process of the operator's account can choose a dunst action,
so a click could release or stop a delivery in the operator's name; that tokens
lived for ever; that a warning's answers died in ten seconds; and that a restarted
notifier left dead buttons (hq ADR 0258).

modules/dunst/README.md

@@ -20,8 +20,10 @@ waits in this bundle for the operator's choice (dunst offers the actions on a mi
 context menu). The token chosen is said as this module's event `action-chosen`; it becomes the
 node-notifier seat's event once seats publish events of their own (novox/hq to-be 46 phase 3). Nothing
 is said for a notification closed, expired or replaced without an answer, and a wait ends after seven
-days. A restart of this bundle ends the waits it held: the notification stays shown, and its answers do
-nothing then (novox/hq ADR 0253).
+days. A notification that offers answers stays until dismissed (`expire_ms` 0). A restart of this bundle
+ends the waits it held; it says `started` {machine} once it serves, and the operator channel shows the
+open answers there again (novox/hq ADR 0258). `notify-send` prints the id before it waits, also into a
+pipe (checked on the laptop on 2026-10-08: the id at once, and "Wait timeout expired" when it expired).
 
 ## Tools