desktop.notifications.exec: add notification command io-timeout, more aggressive recursion block