[Notifications] Use explicit launcher job instead of URL invocation

Allows us to run executables, e.g. downloaded installers.
Also moves some of the logic to the C++ side.

It also indicates "openwith" Kiosk restriction in the UI now by hiding
the button.