Add SMS OTP, harden auth, and fix order/checkout server bugs.

Ship 4-digit OTP with rate-limit attempts, Tehran-safe expiry/rass math, larger JSON body limit for check images, and safer order pricing/status guards. Include rebuilt dist for prebuilt deploy.

Co-authored-by: Cursor <cursoragent@cursor.com>

dist/auth/auth.module.js

@@ -12,17 +12,20 @@ const jwt_1 = require("@nestjs/jwt");
 const config_1 = require("@nestjs/config");
 const auth_service_1 = require("./auth.service");
 const auth_controller_1 = require("./auth.controller");
+const sms_module_1 = require("../sms/sms.module");
+const jwt_secret_1 = require("../common/utils/jwt-secret");
 let AuthModule = class AuthModule {
 };
 exports.AuthModule = AuthModule;
 exports.AuthModule = AuthModule = __decorate([
     (0, common_1.Module)({
         imports: [
+            sms_module_1.SmsModule,
             jwt_1.JwtModule.registerAsync({
                 imports: [config_1.ConfigModule],
                 inject: [config_1.ConfigService],
                 useFactory: (config) => ({
-                    secret: config.get('JWT_SECRET', 'fabric-trade-dev-secret'),
+                    secret: (0, jwt_secret_1.resolveJwtSecret)(config),
                     signOptions: {
                         expiresIn: config.get('JWT_EXPIRES_IN', '7d'),
                     },