added validation for forms, sensitive text fields have been masked

src/globals/Notifications/index.ts

@@ -0,0 +1,18 @@
+import type { GlobalConfig } from 'payload'
+import { notificationsFields } from './fields.js'
+
+/**
+ * Builds the Notifications global — localized action-result texts. Readable by
+ * any authenticated panel user; server-side helpers read it with overrideAccess
+ * so the frontend can resolve texts without a session.
+ */
+export function buildNotifications(): GlobalConfig {
+  return {
+    slug: 'notifications',
+    label: 'Notifications',
+    access: {
+      read: () => true, // texts are public-facing (shown to end users)
+    },
+    fields: notificationsFields,
+  }
+}