feat: KYC re-verify UX, family/nominee tab gating, savings dialogs, cfcfrms shell

- KYC tab: fix Verify (PAN) and Send OTP (Aadhaar) being disabled in edit mode;
  unmask Aadhaar input and show on-file masked value as hint; resolve kycId
  from id/kycId/resourceId fallbacks.
- Client stepper/view: add familyAllowed / nomineeAllowed predicates +
  CanActivate route guards. Family tab hidden for non-individuals, Nominee
  tab hidden for non-proprietor entities. Family-members step accepts a
  nomineeOnly input for proprietorship clients. Add/Edit/Delete buttons
  inside family-members and nominee tabs gated by canAdd.
- cfcfrms: add cfcfrms-shell wrapper, restyle complaint/fraud/mule/escalate
  pages and dashboard.
- Savings: identity-verify and transaction-confirm dialogs, manage / activate
  / add-charge flows, account preview styling.
- Tasks, core shell, account-nominees, icons: minor style and behaviour
  updates.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/app/cfcfrms/cfcfrms-routing.module.ts

@@ -9,6 +9,7 @@
 import { NgModule } from '@angular/core';
 import { Routes, RouterModule } from '@angular/router';
 import { Route } from '../core/route/route.service';
+import { CfcfrmsShellComponent } from './cfcfrms-shell/cfcfrms-shell.component';
 import { CfcfrmsDashboardComponent } from './dashboard/cfcfrms-dashboard.component';
 import { ComplaintListComponent } from './complaint-list/complaint-list.component';
 import { ComplaintDetailComponent } from './complaint-detail/complaint-detail.component';
@@ -23,6 +24,7 @@ const routes: Routes = [
   Route.withShell([
     {
       path: 'cfcfrms',
+      component: CfcfrmsShellComponent,
       data: { title: 'CFCFRMS', breadcrumb: 'CFCFRMS' },
       children: [
         {