{# The notifications form. Included by settings_section.html in its editing state. The URL and token fields never carry a stored value: a configured channel renders the redaction placeholder, and the server treats that placeholder as "keep what is stored". Pasting a whole new value replaces it; clearing the field removes the channel. This form is also the one whose submissions are never echoed back on a refusal, so a pasted secret travels exactly once. #}