feat: KYC re-verify UX, family/nominee tab gating, savings dialogs, cfcfrms shell

- KYC tab: fix Verify (PAN) and Send OTP (Aadhaar) being disabled in edit mode;
  unmask Aadhaar input and show on-file masked value as hint; resolve kycId
  from id/kycId/resourceId fallbacks.
- Client stepper/view: add familyAllowed / nomineeAllowed predicates +
  CanActivate route guards. Family tab hidden for non-individuals, Nominee
  tab hidden for non-proprietor entities. Family-members step accepts a
  nomineeOnly input for proprietorship clients. Add/Edit/Delete buttons
  inside family-members and nominee tabs gated by canAdd.
- cfcfrms: add cfcfrms-shell wrapper, restyle complaint/fraud/mule/escalate
  pages and dashboard.
- Savings: identity-verify and transaction-confirm dialogs, manage / activate
  / add-charge flows, account preview styling.
- Tasks, core shell, account-nominees, icons: minor style and behaviour
  updates.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/app/clients/clients-view/kyc-tab/kyc-tab.component.html

@@ -560,9 +560,14 @@
                       matInput
                       formControlName="aadhaarNumber"
                       maxlength="12"
-                      type="password"
+                      inputmode="numeric"
+                      autocomplete="off"
+                      placeholder="Enter 12-digit Aadhaar"
                       [readonly]="aadhaarOtpSent"
                     />
+                    @if (kycData?.aadhaarNumberMasked) {
+                      <mat-hint>On file: {{ kycData.aadhaarNumberMasked }}</mat-hint>
+                    }
                     @if (kycForm.get('aadhaarNumber')?.hasError('pattern') && kycForm.get('aadhaarNumber')?.touched) {
                       <mat-error>{{ 'labels.inputs.Enter 12-digit Aadhaar' | translate }}</mat-error>
                     }

src/app/clients/clients-view/kyc-tab/kyc-tab.component.ts

@@ -147,12 +147,15 @@ export class KycTabComponent implements OnInit, OnDestroy {
         this.loading = false;
         this.kycData = data;
         if (data) {
-          this.kycId = data.id?.toString() || null;
+          const rawKycId = data.id ?? data.kycId ?? data.resourceId;
+          this.kycId = rawKycId != null ? rawKycId.toString() : null;
           this.kycForm.patchValue({
             kycType: data.kycType || 1,
             riskCategory: data.riskCategory || 1,
             panNumber: data.panNumber || '',
-            aadhaarNumber: data.aadhaarNumberMasked || '',
+            // Aadhaar is stored masked on the server; user must re-enter
+            // the full 12-digit number to re-verify, so don't pre-fill.
+            aadhaarNumber: '',
             gstinNumber: data.gstinNumber || '',
             remarks: data.remarks || ''
           });
@@ -181,6 +184,15 @@ export class KycTabComponent implements OnInit, OnDestroy {
   toggleEditMode(): void {
     this.isEditMode = !this.isEditMode;
     this.resetOtpState();
+    if (this.isEditMode) {
+      // Clear Aadhaar so the user types a fresh 12-digit number for re-verify;
+      // server only returns the masked form which would fail validation.
+      this.kycForm.get('aadhaarNumber')?.reset('');
+      this.verificationStatus.aadhaar = null;
+      this.verificationStatus.pan = null;
+      this.verificationError.aadhaar = null;
+      this.verificationError.pan = null;
+    }
   }
 
   saveKyc(): void {