This morning I noticed a problem. The Mastodon instance actually has two Jail environments, one of which is on the VPS of the reverse proxy. Two days ago, I stopped it (it's not necessary, but serves as support and failover if the primary one is down), and it remained stopped.
Push notifications via Google FCM stopped arriving, while those via UnifiedPush were still coming through.
After a morning of debugging, I figured it out: the Jail environments on the bigger BSD Cafe VPS route all traffic via Wireguard, and there was an MTU issue.
The push notifications via FCM contain the full notification data in an encrypted form, while those via UnifiedPush simply "wake up" the app, which then fetches the notification.
In other words, the first type had large packets that were being blocked due to the MTU discrepancy.
I suspect this might have affected the functioning of the other Jails as well, so I modified all of them, and now everything should be fine.