Serve the Galaxy app key and its QR code from /api/galaxy/session to direct local connections so the Android app can import the tunnel key on its own. Let the app and the iOS app register for Sentry push alerts.
Implement Sentry scanning, notification state and worker cancellation through explicit policies and preferences.