Get My Secure Notification

Single status read over the public surface.

Same behavior as the internal read route — this exists so the AI check_secure_notification_status tool can be configured with a fully-qualified endpoint (https://<host>/workflows/v1/...): the gateway only proxies /workflows/v1, so the internal route is not reachable by FQDN.