feat: KYC re-verify UX, family/nominee tab gating, savings dialogs, cfcfrms shell

- KYC tab: fix Verify (PAN) and Send OTP (Aadhaar) being disabled in edit mode;
  unmask Aadhaar input and show on-file masked value as hint; resolve kycId
  from id/kycId/resourceId fallbacks.
- Client stepper/view: add familyAllowed / nomineeAllowed predicates +
  CanActivate route guards. Family tab hidden for non-individuals, Nominee
  tab hidden for non-proprietor entities. Family-members step accepts a
  nomineeOnly input for proprietorship clients. Add/Edit/Delete buttons
  inside family-members and nominee tabs gated by canAdd.
- cfcfrms: add cfcfrms-shell wrapper, restyle complaint/fraud/mule/escalate
  pages and dashboard.
- Savings: identity-verify and transaction-confirm dialogs, manage / activate
  / add-charge flows, account preview styling.
- Tasks, core shell, account-nominees, icons: minor style and behaviour
  updates.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/app/clients/create-client/create-client.component.ts

@@ -14,6 +14,7 @@ import { map } from 'rxjs/operators';
 
 /** Custom Services */
 import { ClientsService } from '../clients.service';
+import { familyAllowed, nomineeAllowed, isProprietorship } from '../utils/client-rules';
 
 /** Custom Components */
 import { ClientGeneralStepComponent } from '../client-stepper/client-general-step/client-general-step.component';
@@ -130,9 +131,37 @@ export class CreateClientComponent {
     return this.clientGeneralStep?.createClientForm;
   }
 
-  /** Total tab count: Individual has Family tab, Non-Individual has Scheme & Sector tab — both 5 */
+  /**
+   * Constitution display name for the selected entity constitution. Drives the
+   * proprietorship-only nominee rule below. Empty / null for individual clients.
+   */
+  get constitutionLabel(): string {
+    return this.clientGeneralStep?.selectedConstitution?.name || '';
+  }
+
+  /** Whether the Family/Nominee tab should appear at all. */
+  get showFamilyTab(): boolean {
+    return nomineeAllowed(this.legalFormType, this.constitutionLabel);
+  }
+
+  /**
+   * Whether the Family/Nominee tab should render in nominee-only mode (family
+   * member rows hidden). True for entity proprietorship, false for individuals.
+   */
+  get familyTabNomineeOnly(): boolean {
+    return !familyAllowed(this.legalFormType, this.constitutionLabel) && this.showFamilyTab;
+  }
+
+  /** Total tab count varies by legal form + constitution.
+   *   Individual:                General + KYC + Address + Family + Preview        = 5
+   *   Entity (proprietorship):   General + KYC + S&S + Address + Nominees + Preview = 6
+   *   Entity (non-proprietor):   General + KYC + S&S + Address + Preview            = 5
+   */
   get totalTabs(): number {
-    return 5;
+    let count = 4; // General + KYC + Address + Preview
+    if (this.legalFormType === 2) count++; // S&S only for entities
+    if (this.showFamilyTab) count++;
+    return count;
   }
 
   /**
@@ -358,9 +387,11 @@ export class CreateClientComponent {
       return;
     }
 
-    // Family tab (index 3 for Individual, 4 for Non-Individual)
+    // Family tab (index 3 for Individual, 4 for Non-Individual proprietorship).
+    // Skip entirely when the tab is hidden (entity non-proprietor) so we don't
+    // confuse Preview at the same index slot with the Family step.
     const familyTabIndex = this.legalFormType === 2 ? 4 : 3;
-    if (tabIndex === familyTabIndex) {
+    if (this.showFamilyTab && tabIndex === familyTabIndex) {
       if (this.clientFamilyMembersStep?.hasFamilyMembers) {
         this.saveClientFamilyMembers(clientId);
       }