Yes its mixed mode. The Trace log is useful, as there are some connections happening for that user. If I connect before starting the SqlDependency - it works; after the SqlDependency there are logon failures.
So I think the Service Broker setup is incorrect for the service user
It all works now for NT AUTHORITY\SYSTEM - with trusted_connection
Which is good enough for now.