Making the cross-wiki requests client-side was a good proof of concept, and actually worked out pretty well. But as people lock up their browser privacy settings we start to run into issues and stuff.
We should make these API requests server-side using curl multi async stuff, and return the output as part of the meta=notifications API response.