Scoped manifest and service worker unlock offline shell and future push, with an install toast and logout cache wipe.