fix(clients): pwdCategoryOptions on edit template, minor-age threshold to 18, minor KYC identity-proof bypass

- ClientData.templateOnTop()/templateWithSavingAccountOptions() never copied pwdCategoryOptions
  from the template — the Disability Type dropdown was always empty on the edit-mode GET
  /clients/{id}?template=true call, even though create-time template() had it.
- Raise the minor-detection threshold in ClientKycApiResource from age <10 to <18 (legal
  definition), mirroring the frontend's own rule so the required-documents list served here
  stays consistent.
- ClientKycCommand.validateForInitiate() unconditionally required at least one of
  PAN/Aadhaar/GSTIN, with no awareness of the Birth Certificate/School ID document-type picker
  minors actually use — blocking "Save & Next" on the KYC tab for every minor client. Added a
  skipIdentityDocumentCheck flag, set from client.getIsMinor() at both call sites
  (initiateKyc/initiateKycInline).
- Added Birth Certificate and School ID Card as KYCIdProofType code values — they were already
  offered as document-type options for minors but never existed in the code-value list that
  saveKycDocProof() resolves against, so selecting either silently failed to save any
  identifier/document.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

fineract-provider/src/main/resources/db/changelog/tenant/changelog-tenant.xml

@@ -448,6 +448,7 @@
     <include file="parts/0425_add_diploma_degree_qualification.xml" relativeToChangelogFile="true"/>
     <include file="parts/0426_add_graduate_education_level.xml" relativeToChangelogFile="true"/>
     <include file="parts/0427_add_caretaker_relationship_value.xml" relativeToChangelogFile="true"/>
+    <include file="parts/0428_add_minor_kyc_id_proof_codes.xml" relativeToChangelogFile="true"/>
     <!-- NOTE: the numbers below (0341-0359) re-use prefixes already used above by the chequebook/CTS
          clearing catchup migrations — these come from a long-diverged branch (uate) that assigned its own
          sequence independently. Liquibase tracks changesets by filename + id + author, not by the numeric

fineract-provider/src/main/resources/db/changelog/tenant/parts/0428_add_minor_kyc_id_proof_codes.xml

@@ -0,0 +1,65 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one
+  or more contributor license agreements. See the NOTICE file
+  distributed with this work for additional information
+  regarding copyright ownership. The ASF licenses this file
+  to you under the Apache License, Version 2.0 (the
+  "License"); you may not use this file except in compliance
+  with the License. You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing,
+  software distributed under the License is distributed on an
+  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+  KIND, either express or implied. See the License for the
+  specific language governing permissions and limitations
+  under the License.
+-->
+<databaseChangeLog xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
+                   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+                   xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-4.13.xsd">
+
+    <!-- ClientKycApiResource.getRequiredDocuments() has always offered "Birth Certificate" and
+         "School ID Card" as identity-proof options for minor clients, but neither was ever added
+         as a KYCIdProofType code value (0251_add_kyc_proof_type_codes.xml). Since
+         edit-client/create-client's saveKycDocProof() resolves the picked document type against
+         this code list (resolveDocumentTypeId), selecting either option for a minor silently
+         failed to save any identifier/document — the KYC record's own document-name/number fields
+         persisted fine, but the uploaded file never did. -->
+    <changeSet author="CBS" id="0428-1">
+        <preConditions onFail="MARK_RAN">
+            <sqlCheck expectedResult="0">
+                SELECT COUNT(*) FROM m_code_value cv JOIN m_code c ON c.id = cv.code_id
+                WHERE c.code_name = 'KYCIdProofType' AND cv.code_value = 'Birth Certificate'
+            </sqlCheck>
+        </preConditions>
+        <sql>
+            INSERT INTO m_code_value (code_id, code_value, code_description, order_position, is_active, is_mandatory)
+            SELECT c.id, 'Birth Certificate', 'BIRTH_CERTIFICATE',
+                   (SELECT COALESCE(MAX(cv.order_position), 0) FROM m_code_value cv WHERE cv.code_id = c.id) + 1,
+                   true, false
+            FROM m_code c
+            WHERE c.code_name = 'KYCIdProofType';
+        </sql>
+    </changeSet>
+
+    <changeSet author="CBS" id="0428-2">
+        <preConditions onFail="MARK_RAN">
+            <sqlCheck expectedResult="0">
+                SELECT COUNT(*) FROM m_code_value cv JOIN m_code c ON c.id = cv.code_id
+                WHERE c.code_name = 'KYCIdProofType' AND cv.code_value = 'School ID Card'
+            </sqlCheck>
+        </preConditions>
+        <sql>
+            INSERT INTO m_code_value (code_id, code_value, code_description, order_position, is_active, is_mandatory)
+            SELECT c.id, 'School ID Card', 'SCHOOL_ID_CARD',
+                   (SELECT COALESCE(MAX(cv.order_position), 0) FROM m_code_value cv WHERE cv.code_id = c.id) + 1,
+                   true, false
+            FROM m_code c
+            WHERE c.code_name = 'KYCIdProofType';
+        </sql>
+    </changeSet>
+
+</databaseChangeLog>