fix(notification): accept public 40-char token (or numeric attempt id) on approve/disapprove; bind poll regex to its URL placeholder

fix(notification): accept public 40-char token (or numeric attempt id) on approve/disapprove; bind poll regex to its URL placeholder #1295