Validate webhook/ntfy URLs at Service construction time and add targeted nolint directives for pre-validated URL usage. Fix goimports formatting in tlscheck_test.go.