hub v0.116.0: every new customer starts WITH the off-site copy (operator ruling)

Off-site is ON by default for a new customer — shared, 100 GB soft quota prefilled,
the checkbox kept so an operator can opt a customer out. The reason is this repo's
own [FACT]: the whole-guest tiers do not carry the data drive and a Tier-1 unit has
no file leg, so with this unticked a one-drive box keeps NO copy of the household's
own files. Measured on a fresh box the same day.

The quota is prefilled because the fill warning only fires when quota_gb > 0.

Also registers controller v0.244.0's app_deploy_started / app_deploy_failed in both
allowedEventTypes and customerMessages, per the rule that the two move together.

Red-proofed: dropping the default fails the new render test.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

hub/internal/notify/templates.go

@@ -139,6 +139,11 @@ var customerMessages = map[string]string{
 	"app_deployed":     "Alkalmazás telepítve.",
 	"app_removed":      "Alkalmazás eltávolítva.",
 	"app_start_failed": "Egy telepített alkalmazás nem fut — ellenőrizze a rendszermonitort.",
+	// R-536 (controller v0.244.0): the pair that makes „telepítve" mean it. The started event is the
+	// acceptance `app_deployed` used to assert beside the 202; the failed one is what an interrupted
+	// install used to be — silence. A new type must enter allowedEventTypes AND this map together.
+	"app_deploy_started": "Alkalmazás telepítése elindult.",
+	"app_deploy_failed":  "Egy alkalmazás telepítése nem fejeződött be.",
 
 	// Disaster recovery events
 	"disaster_recovery_started":   "Katasztrófa helyreállítás elindítva.",