Stage 9: Telegram integration (connector side-service, Mini App, out-of-app push)

New platform/telegram connector (own container, bot token only there):
- go-telegram/bot long-poll loop: /start deep-links + Mini App launch button.
- gRPC API pkg/proto/telegram/v1 (Telegram service): ValidateInitData, Notify
  (renders a localized message + deep-link button), SendToUser/SendToGameChannel
  (admin, wired in Stage 10). Generic methods are platform-agnostic (external_id).
- Bot API base override for Telegram's test environment; Dockerfile + compose
  (VPN sidecar, no public ingress); README.

Gateway:
- initData validation relocated from the gateway into the connector; the gateway
  calls ValidateInitData over gRPC (GATEWAY_CONNECTOR_ADDR), drops the bot token,
  and deletes internal/auth.
- Out-of-app push: runPushPump routes events whose recipient has no live in-app
  stream to connector.Notify, gated by /internal/push-target + the in-app-only
  flag (race-free de-dup); HasSubscribers added to the push hub.

Backend:
- Migration 00007 accounts.notifications_in_app_only (default true) + jetgen.
- ProvisionTelegram seeds a new account's language/display name from the launch
  fields; IdentityExternalID reverse lookup; /internal/push-target handler.

UI:
- Telegram Mini App launch: detect initData, apply themeParams, authTelegram,
  route the deep-link start_param (g/i/f); /telegram/ guard redirects outside
  Telegram. Vite relative base + telegram-web-app.js. In-app-only profile toggle;
  share-to-Telegram link for a friend code. Vitest + Playwright coverage.

Wire/docs/CI: fbs Profile/UpdateProfileRequest gain notifications_in_app_only
(Go + TS); go.work uses ./platform/telegram; go-unit.yaml covers it; PLAN,
ARCHITECTURE, FUNCTIONAL (+ru), UI_DESIGN, READMEs updated.

ui/src/lib/deeplink.test.ts

@@ -0,0 +1,38 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { friendCodeParam, gameParam, invitationParam, parseStartParam, shareLink } from './deeplink';
+
+describe('parseStartParam', () => {
+  it('classifies game / invitation / friend code', () => {
+    expect(parseStartParam('g7c9e6679')).toEqual({ kind: 'game', id: '7c9e6679' });
+    expect(parseStartParam('iabc-123')).toEqual({ kind: 'invitation', id: 'abc-123' });
+    expect(parseStartParam('f123456')).toEqual({ kind: 'friendCode', code: '123456' });
+  });
+
+  it('falls back to the lobby for empty / unknown / value-less params', () => {
+    expect(parseStartParam('')).toEqual({ kind: 'lobby' });
+    expect(parseStartParam(undefined)).toEqual({ kind: 'lobby' });
+    expect(parseStartParam(null)).toEqual({ kind: 'lobby' });
+    expect(parseStartParam('x-nope')).toEqual({ kind: 'lobby' });
+    expect(parseStartParam('g')).toEqual({ kind: 'lobby' });
+  });
+
+  it('round-trips the build helpers', () => {
+    expect(parseStartParam(gameParam('id1'))).toEqual({ kind: 'game', id: 'id1' });
+    expect(parseStartParam(invitationParam('id2'))).toEqual({ kind: 'invitation', id: 'id2' });
+    expect(parseStartParam(friendCodeParam('654321'))).toEqual({ kind: 'friendCode', code: '654321' });
+  });
+});
+
+describe('shareLink', () => {
+  afterEach(() => vi.unstubAllEnvs());
+
+  it('returns null without a configured base', () => {
+    vi.stubEnv('VITE_TELEGRAM_LINK', '');
+    expect(shareLink('gx')).toBeNull();
+  });
+
+  it('wraps a payload in a startapp link', () => {
+    vi.stubEnv('VITE_TELEGRAM_LINK', 'https://t.me/bot/app');
+    expect(shareLink('f123456')).toBe('https://t.me/bot/app?startapp=f123456');
+  });
+});