Take only acknowledgements from a desk click, and make each answer a one-time ticket

Review found that any process of the operator's account can choose a dunst action,
so a click could release or stop a delivery in the operator's name; that tokens
lived for ever; that a warning's answers died in ten seconds; and that a restarted
notifier left dead buttons (hq ADR 0258).

modules/messenger/module.json

@@ -28,18 +28,15 @@
     "mesh-controller.condition-raised",
     "mesh-controller.condition-changed",
     "mesh-controller.condition-cleared",
-    "dunst.action-chosen"
+    "dunst.action-chosen",
+    "dunst.started"
   ],
   "emits": [
     "refused"
   ],
   "invokes": [
     "seat:node-notifier.send",
-    "seat:mesh-controller.conditions",
-    "seat:mesh-delivery.release",
-    "seat:mesh-delivery.stop",
-    "seat:mesh-controller.plans",
-    "seat:node-service-manager.restart"
+    "seat:mesh-controller.conditions"
   ],
   "state": [
     "open",