feat: KYC re-verify UX, family/nominee tab gating, savings dialogs, cfcfrms shell

- KYC tab: fix Verify (PAN) and Send OTP (Aadhaar) being disabled in edit mode;
  unmask Aadhaar input and show on-file masked value as hint; resolve kycId
  from id/kycId/resourceId fallbacks.
- Client stepper/view: add familyAllowed / nomineeAllowed predicates +
  CanActivate route guards. Family tab hidden for non-individuals, Nominee
  tab hidden for non-proprietor entities. Family-members step accepts a
  nomineeOnly input for proprietorship clients. Add/Edit/Delete buttons
  inside family-members and nominee tabs gated by canAdd.
- cfcfrms: add cfcfrms-shell wrapper, restyle complaint/fraud/mule/escalate
  pages and dashboard.
- Savings: identity-verify and transaction-confirm dialogs, manage / activate
  / add-charge flows, account preview styling.
- Tasks, core shell, account-nominees, icons: minor style and behaviour
  updates.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/app/clients/clients-routing.module.ts

@@ -60,6 +60,7 @@ import { KycTabComponent } from './clients-view/kyc-tab/kyc-tab.component';
 import { CkycTabComponent } from './clients-view/ckyc-tab/ckyc-tab.component';
 import { Form60TabComponent } from './clients-view/form60-tab/form60-tab.component';
 import { EntityClassificationTabComponent } from './clients-view/entity-classification-tab/entity-classification-tab.component';
+import { familyAllowedGuard, nomineeAllowedGuard } from './utils/family-nominee.guard';
 
 const routes: Routes = [
   Route.withShell([
@@ -123,10 +124,12 @@ const routes: Routes = [
             {
               path: 'nominees',
               component: NomineeTabComponent,
+              canActivate: [nomineeAllowedGuard],
               data: { title: 'Nominees', breadcrumb: 'Nominees', routeParamBreadcrumb: false }
             },
             {
               path: 'family-members',
+              canActivate: [familyAllowedGuard],
               data: { title: 'Family Members', breadcrumb: 'Family Members', routeParamBreadcrumb: false },
               children: [
                 {