feat(aml): add RULE_15 for forced manual check on wallets

[TaprootFreak]

Summary

• Add new AML rule RULE_15 (Force Manual Check) for wallet-level transaction monitoring
• Introduces AmlErrorType.FALLBACK - only applies when transaction would otherwise pass
• Includes migration to enable RULE_15 for FinanceFarm wallet (ID 42)

Behavior

Scenario	Result
Transaction would pass + RULE_15 active	Pending + ManualCheck
Other errors exist (USER_BLOCKED, KYC_LEVEL, etc.)	Error takes priority, RULE_15 ignored
RULE_15 not active	Normal flow (Pass if no errors)

Implementation Details

New enum values:

• AmlRule.RULE_15 - Force Manual Check
• AmlError.FORCE_MANUAL_CHECK - Error type for forced review
• AmlErrorType.FALLBACK - Only applies if no other errors exist

Logic in getAmlResult():

1. Separate FALLBACK errors from real errors
2. If no real errors but FALLBACK exists → apply FALLBACK (Pending + ManualCheck)
3. If real errors exist → process normally, ignore FALLBACK

Migration

Automatically enables RULE_15 for FinanceFarm wallet:

-- Wallet ID 42: '2' → '2;15'
-- RULE_2: KycLevel 30 requirement
-- RULE_15: Force manual check

Files Changed

• src/subdomains/core/aml/enums/aml-rule.enum.ts
• src/subdomains/core/aml/enums/aml-error.enum.ts
• src/subdomains/core/aml/services/aml-helper.service.ts
• migration/1768503536967-SetFinanceFarmAmlRules.js

Test Plan

• Wallet with RULE_15 gets Pending + ManualCheck when no other errors
• Real errors (CRUCIAL, SINGLE, MULTI) take priority over RULE_15
• Combined rules (e.g., 2;15) work correctly
• Migration is idempotent (safe to run multiple times)
• BuyCrypto doesn't check RULE_15 twice

[github-actions]

⚠️ Unverified Commits (1)

The following commits are not signed/verified:

• a40f7f2 [NOTASK] Refactoring (Yannick1712)

How to sign commits

# SSH signing (recommended)
git config --global gpg.format ssh
git config --global user.signingkey ~/.ssh/id_ed25519.pub
git config --global commit.gpgsign true

# Re-sign last commit
git commit --amend -S --no-edit
git push --force-with-lease

---

⚠️ Non-Conventional Commits (1)

The following commits don't follow conventional commit format:

• a40f7f2 [NOTASK] Refactoring

Expected: type(scope): description
Types: feat, fix, refactor, test, ci, docs, chore, perf, style, build, revert