Update legal pages with ICO registration, query logging, push notifications, and automated recommendations disclosure

- Add ICO registration reference (00014395133) to privacy policy, terms of service, and refund policy
- Document search/query logging (hashed IP, location, fuel type, result count) with 24-month retention under legitimate interests
- Add push notification data section (OneSignal endpoints, encryption keys, preferences) to privacy policy
- Add new section on automated recommendations explaining fill-up timing algorithm is informational only without legal effects
- Clarify IP address collection context: security/abuse/fraud only, not individual profiling
- Update retention periods: security logs 12 months, query logs 24 months, push subscriptions until unsubscribe
- Expand data processor descriptions (OneSignal push data, Umami cookieless commitment)
- Add commercial use restrictions to terms: no scraping, mirroring, or republishing compiled data/rankings without permission
- Clarify downstream data aggregator role and upstream data feed limitations
- Add prohibition on using service while operating motor vehicle
- Remove annual billing references (monthly only)
- Add VAT status notice and downgrade-to-free-tier behavior on cancellation
- Add data controller contact details to privacy policy footer

resources/views/legal/refund.blade.php

@@ -1,7 +1,7 @@
 {{-- DRAFT: Generated {{ date('Y-m-d') }}. Review by UK-qualified solicitor recommended before launch. --}}
 <x-layouts.legal
     title="Refund & Cancellation Policy"
-    heading="Refund &amp; Cancellation Policy"
+    heading="Refund & Cancellation Policy"
     lastUpdated="{{ now()->format('j F Y') }}"
     metaDescription="Your right to cancel a FuelAlert subscription, including the 14-day cooling-off period under UK law.">