"a service worker registration has at most one push subscription" seems wrong

[annevk]

In particular when a push subscription is being replaced, the old one can still be used. At that point there's two push subscriptions associated with the service worker registration, no? And you could imagine this happening a couple of times in quick succession with the older ones not immediately expiring. At least there's nothing currently that would prevent that.