X_NOTIFY_PUSH_PROVIDER_REFUSED
Means
APNs or FCM refused a push for good
Typical cause
the provider refused the request and will refuse it again: a bad or revoked credential, a wrong topic or project, or a payload over its limit
Fix
x jobs list --json — read meta.provider, meta.status and meta.reason on the failed step, then fix the credential (x secrets set ULTIMATE_APNS_PRIVATE_KEY) or the message