Pre-ticked boxes are not consent: notification prompts default to off

A one-time notification prompt where every channel starts off: separate purposes, tri-state consent, a fail-open call gate, and one-click unsubscribe.