Remove internal notification caller tokens

infra/local/scripts/bootstrap.sh

@@ -58,8 +58,8 @@ provision_agents() {
   directory="$STATE/agents/$service"
   mkdir -p "$directory"; chmod 755 "$directory"
   case "$service" in
-   bff) paths='services/bff/jwt services/notifications/callers/bff';;
-   notifications) paths='services/notifications/callers/bff infrastructure/nats/auth services/notifications/email/resend';;
+   bff) paths='services/bff/jwt';;
+   notifications) paths='infrastructure/nats/auth services/notifications/email/resend';;
    nats) paths=infrastructure/nats/auth;;
   esac
   : > "$WORK/policy"
@@ -92,7 +92,7 @@ up() {
  initialize
  mounts
  migrate_secrets
- for path in infrastructure/nats/auth services/notifications/callers/bff services/bff/jwt; do
+ for path in infrastructure/nats/auth services/bff/jwt; do
   if [ "$(kv "$path")" = null ]; then
    field=token; [ "$path" != services/bff/jwt ] || field=jwt
    random | jq -Rs --arg field "$field" '{($field):rtrimstr("\n")}' | put "$path"