feat(ctsclearing): signature-verification gate and full NPCI field capture for inward cheques

Adds a manual signature-verification step to the inward CTS decision flow:
a new VERIFY_SIGNATURE command records the clerk's confirmation, and
InwardClearingItem.pass() now refuses to pass a cheque until signatureOk
is true — enforced server-side, not just a disabled UI button.

Fixes a real bug where ChequeLeaf.leafSerialNo collides across different
cheque books/series (by design — serials are only unique per stock lot),
which could resolve an inward item to the wrong account. NpciInwardPushService
now disambiguates using the drawer account number NPCI already sends
alongside the cheque number.

Also closes a completeness gap found by auditing the outward-CBS -> NPCI ->
inward-CBS pipeline: five fields NPCI sends on every instrument (drawer
account number, deposit account number, instrument type/description, drawee
bank name, per-check IQA breakdown) were read and discarded instead of
persisted — now saved via new columns and exposed on the read API.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

fineract-provider/src/main/resources/db/changelog/tenant/changelog-tenant.xml

@@ -433,4 +433,6 @@
     <include file="parts/0410_npci_inward_push_log.xml" relativeToChangelogFile="true"/>
     <include file="parts/0411_inward_item_source_details.xml" relativeToChangelogFile="true"/>
     <include file="parts/0412_activate_outward_clearing_batch_job.xml" relativeToChangelogFile="true"/>
+    <include file="parts/0413_inward_item_verify_signature_permission.xml" relativeToChangelogFile="true"/>
+    <include file="parts/0414_inward_item_full_source_details.xml" relativeToChangelogFile="true"/>
 </databaseChangeLog>

fineract-provider/src/main/resources/db/changelog/tenant/parts/0413_inward_item_verify_signature_permission.xml

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<databaseChangeLog xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
+                   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+                   xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-4.1.xsd">
+
+    <!--
+        New command on INWARDCLEARINGITEM: the clerk's manual signature-verification decision, required
+        before an item can be PASSed (see InwardClearingItem.pass()). Mirrors the PASS/RETURN permission
+        rows seeded in 0395_clearing_permissions.xml.
+    -->
+
+    <changeSet id="0413-inward-item-verify-signature-permission" author="CBS" runOnChange="false">
+        <sql>
+            INSERT INTO m_permission (grouping, code, entity_name, action_name, can_maker_checker)
+            SELECT 'portfolio', 'VERIFY_SIGNATURE_INWARDCLEARINGITEM', 'INWARDCLEARINGITEM', 'VERIFY_SIGNATURE', false
+            WHERE NOT EXISTS (SELECT 1 FROM m_permission WHERE code = 'VERIFY_SIGNATURE_INWARDCLEARINGITEM');
+        </sql>
+    </changeSet>
+
+</databaseChangeLog>

fineract-provider/src/main/resources/db/changelog/tenant/parts/0414_inward_item_full_source_details.xml

@@ -0,0 +1,38 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<databaseChangeLog xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
+                   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+                   xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-4.1.xsd">
+
+    <!--
+        A field-by-field audit of the outward-CBS -> NPCI -> inward-CBS pipeline found several fields that
+        arrive in every NPCI instrument package but were silently dropped (read, or not even read, then
+        discarded) instead of being persisted on the inward item:
+          - drawerAccountNumberMasked: the drawee (this bank's own customer) account number, masked, that
+            NpciInwardPushService now also uses to disambiguate colliding cheque-leaf serials — previously
+            used transiently and discarded, now kept for audit trail.
+          - depositAccountNumber: the depositing (collecting-bank) customer's own account identifier.
+          - instrumentType / instrumentTypeDescription: the CTS instrument-type code carried on the wire.
+          - draweeBankName: the receiving bank's own name as asserted by the sender, for audit cross-check.
+          - iqaSubChecks: the per-check IQA breakdown (skew/noise/legibility/completeness), previously only
+            the rolled-up iqaStatus/iqaDetail survived.
+        Additive; safe no-op where applied.
+    -->
+
+    <changeSet id="0414-inward-item-full-source-details" author="CBS">
+        <preConditions onFail="MARK_RAN">
+            <and>
+                <tableExists tableName="m_inward_clearing_item"/>
+                <not><columnExists tableName="m_inward_clearing_item" columnName="drawer_account_number_masked"/></not>
+            </and>
+        </preConditions>
+        <addColumn tableName="m_inward_clearing_item">
+            <column name="drawer_account_number_masked" type="VARCHAR(40)"/>
+            <column name="deposit_account_number" type="VARCHAR(40)"/>
+            <column name="instrument_type" type="VARCHAR(10)"/>
+            <column name="instrument_type_description" type="VARCHAR(100)"/>
+            <column name="drawee_bank_name" type="VARCHAR(150)"/>
+            <column name="iqa_sub_checks" type="VARCHAR(300)"/>
+        </addColumn>
+    </changeSet>
+
+</databaseChangeLog>