Returns one personal notification config. Requires Users Manager (usersManager). A subscribed type stays in the response when the target user later loses that type's permission; the type permission is not re-checked on read. A notification id that does not belong to this user in the resolved tenant returns 404, without saying whether it exists elsewhere.