Push Notifications without using "allowed user api push urls "

Those endpoints are for the native Web Push API.

If you are building an Android app, and using the UserAPIKey, you can check how we do in DiscourseHub