Restore 0098 SOAP SMS with link fallback and clearer errors

.env.example

@@ -26,20 +26,12 @@ UPLOAD_DIR=uploads
 CORS_ORIGINS=https://montime.ir,https://adm.montime.ir,http://localhost:5173,http://localhost:5174
 
 # 0098sms.com — used when AUTH_RETURN_OTP is not true
-# Transport: soap (default, recommended) or link (legacy)
-# SMS_TRANSPORT=soap
-# SMS_SOAP_URL=https://webservice.0098sms.com/service.asmx
-# From panel: account username, password (or web service password), approved sender line (FROM)
+# From panel: account username, password (or web service password), approved sender line (pnlno)
 SMS_USERNAME=
 SMS_PASSWORD=
-# Alternative name supported for password (same as some older projects)
-# SMS_API_KEY=
+# SMS_API_KEY=   # alias for SMS_PASSWORD
 SMS_SENDER=
-# Optional; default is 0098
-# SMS_DOMAIN=0098
-# Optional OTP text; {code} is replaced. ASCII-only if provider rejects Persian.
-# SMS_OTP_TEMPLATE=Montime code: {code}
-# Optional request timeout in ms (default 15000)
-# SMS_TIMEOUT_MS=15000
-# Optional override for send URL
-# SMS_SEND_URL=http://www.0098sms.com/sendsmslink.aspx
+# soap (default, recommended) | link (legacy GET API, often HTTP 500)
+SMS_TRANSPORT=soap
+# SMS_DOMAIN=0098   # only for link transport
+# SMS_TIMEOUT_MS=20000