feat: add ntfy access token support

- ntfy push notifications now include a Bearer access token when configured
- Add Access Token field to /admin/settings next to server and topic
- Token is stored encrypted like the SMTP password
- Bump version to 0.5.7

app.py

@@ -415,11 +415,12 @@ def mask_api_key(key):
 
 
 def get_ntfy_config():
-    """Return the effective ntfy server URL and topic from runtime settings."""
+    """Return the effective ntfy server URL, topic, and access token from runtime settings."""
     cfg = load_booth_settings()
     return {
         'server': cfg.get('ntfy_server', ''),
         'topic': cfg.get('ntfy_topic', ''),
+        'token': decrypt_value(cfg.get('ntfy_token', '')) or '',
     }
 
 
@@ -437,6 +438,9 @@ def send_ntfy(message, title='Theme Song Booth', priority='default', tags='bell'
         'Priority': priority,
         'Tags': tags,
     }
+    token = ntfy.get('token', '')
+    if token:
+        headers['Authorization'] = f'Bearer {token}'
     try:
         resp = requests.post(url, data=message.encode('utf-8'), headers=headers, timeout=10)
         return resp.status_code in (200, 202)
@@ -1672,10 +1676,13 @@ def admin_settings():
             return redirect(url_for('admin_settings'))
 
         elif action == 'save_ntfy':
-            # Update ntfy push notification server/topic from the settings form.
+            # Update ntfy push notification server/topic/access token from the settings form.
             cfg = load_booth_settings()
             cfg['ntfy_server'] = request.form.get('ntfy_server', '').strip().rstrip('/')
             cfg['ntfy_topic'] = request.form.get('ntfy_topic', '').strip()
+            new_token = request.form.get('ntfy_token', '').strip()
+            if new_token:
+                cfg['ntfy_token'] = encrypt_value(new_token)
             save_booth_settings(cfg)
             flash('ntfy notification settings saved.', 'success')
             return redirect(url_for('admin_settings'))
@@ -1690,7 +1697,7 @@ def admin_settings():
             if ok:
                 flash('Test ntfy notification sent.', 'success')
             else:
-                flash('Failed to send ntfy test notification. Check server and topic.', 'error')
+                flash('Failed to send ntfy test notification. Check server, topic, and access token.', 'error')
             return redirect(url_for('admin_settings'))
 
     return render_template(