Get notification ticket.
The dashboard calls this for every websocket ticket event whose ticket isn't already loaded — it is a READ, gated on TICKET_FIND like GET /tickets. It previously required TICKET_EXPORT (copied from the export endpoints around it), which silently broke realtime inserts for any custom role that can view the inbox but not export.
Bearer <token>.Ok