panel-notifications: Account, Server > Settings, Server > Health, help; e2e

The pages of the mockups accepted in 87fa0a4, built from the kit's partials
(written by a Sonnet agent into the working tree, reviewed here):

- Account: "Send me notifications" in the Profile form, saved with the
  profile; an unticked box is off.
- Server > Settings: the instance switch (box 03), and box 04 Notification
  mail with the DKIM and SPF records of the server's own name, drawn with the
  record partial of a domain's DNS page and checked in DNS. Sending rate
  limits are box 02 in the left column. A record that is not in place is
  tagged as a warning, not a failure: notifications are sent without it.
- Server > Health: card 06 Notification mail with the state of each record
  and a link to Settings, beside Configuration (07); part of the polled
  fragment; Re-check DNS forces it too. Overview does not run this check.
- help.go: the Notifications topic and the clauses in Settings and Your
  account, word for word with help.html.

If the server's key cannot be read the pages still render: the DKIM record
is left out and SPF is shown unchecked.

e2e: the administrator gets a mailbox behind the sink and the server's DKIM
record from Settings is published; the level-2 refusal of the next step must
then arrive as a notification from postmaster@mail.e2e.test, signed as that
name with the key Settings shows, and must not be a row of the Outbound log.
The rotation step now waits for Postfix to be running: it follows a step that
restarts the container, and logrotate's `postfix reload` failed in between.

On the test server, for this tree: go vet clean, go test ./... 23 packages
ok, make e2e ok (147 s); the notification reached the sink 28 s after the
refusal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

internal/web/view/fixtures_test.go

@@ -2,6 +2,7 @@ package view
 
 import (
 	"strconv"
+	"strings"
 	"time"
 )
 
@@ -119,6 +120,10 @@ func healthFixture(refresh bool) *Health {
 		{Label: "Hostname", Value: Plain("mail.example.org"), Mono: true},
 		{Label: "Lookup", Value: Rich("→ 203.0.113.25", Br(), "← mail.example.org"), Mono: true},
 	}
+	h.WithNotificationMail("postmaster@mail.example.org", []MailRow{
+		NewMailRow("DKIM", mailFixtureDKIMHost, DNSCheck{Status: "ok"}),
+		NewMailRow("SPF", "mail.example.org", DNSCheck{Status: "error"}),
+	}, "warn")
 	return h
 }
 
@@ -126,14 +131,25 @@ func healthFixture(refresh bool) *Health {
 // and e-mail.
 func accountFixture() *Account {
 	a := NewAccount(admin(), "global")
-	a.Username, a.Email = "admin", "mix@example.org"
+	a.Username, a.Email, a.Notify = "admin", "mix@example.org", true
 	return a
 }
 
+// mailFixtureDKIMHost is where the mockup publishes the DKIM key of the server's
+// own name.
+const mailFixtureDKIMHost = "sp2026._domainkey.mail.example.org"
+
 // settingsFixture is the mockup's Settings: thirty days of log, a limit of 600
-// messages an hour.
+// messages an hour, notifications on, and the records of the server's own name
+// with the DKIM one published and the SPF one missing.
 func settingsFixture() *Settings {
-	return NewSettings(admin(), "30", FormatRate(600, 3600)).WithInbound("90")
+	key := "v=DKIM1; k=rsa; p=" + strings.Repeat("MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A", 10) + "IDAQAB"
+	return NewSettings(admin(), "30", FormatRate(600, 3600)).WithInbound("90").
+		WithNotifications(true, "postmaster@mail.example.org").
+		WithMail([]Record{
+			ServerMailDKIM("sp2026", mailFixtureDKIMHost, key, DNSCheck{Status: "ok"}),
+			ServerMailSPF("mail.example.org", "v=spf1 a -all", DNSCheck{Status: "error", Detail: "No SPF record is published for mail.example.org."}),
+		})
 }
 
 // outDomainsFixture is the mockup's Outbound domains: three domains, the first