## feat: add SEP-24 interactive withdrawal support for employee cash-out

[wandooadzer-cmyk]

Summary

• Implement SEP-24 interactive deposit/withdrawal flow so employees can convert received ORGUSD to local fiat through local anchors
• Parse TRANSFER_SERVER from stellar.toml for SEP-24 endpoint discovery alongside existing SEP-31 discovery
• Add getSEP24Info, initiateSEP24Withdrawal, and getSEP24Transaction service methods that reuse SEP-10 authentication
• Expose controller handlers and routes mirroring the SEP-31 pattern (/sep24/info, /sep24/withdraw, /sep24/status/:domain/:id)
• Wire routes with isolateOrganization, require2FA, and idempotencyMiddleware consistent with cross-border withdrawal protections
• Add comprehensive unit tests covering discovery, info fetch, withdrawal initiation with memo handling, and transaction polling

Why

The README lists employee "Withdrawal Options" via "Local Anchors (Cash-out)" as a core actor flow. SEP-31 is cross-border/send-side; employee self-service cash-out to local currency is the SEP-24 interactive flow. Without this, employees cannot actually convert received ORGUSD to local fiat through the platform.

Endpoints

Method	Path	Description
GET	/api/payments/sep24/info?domain=	Fetch supported assets, fields, and fees
POST	/api/payments/sep24/withdraw	Initiate interactive withdrawal (returns anchor URL)
GET	/api/payments/sep24/status/:domain/:id	Poll transaction status

Test results

All new tests pass. Pre-existing test failure in the suite is due to missing axios dev dependency in the test environment, unrelated to this change.

Closes #408