fix(sms): every SMS says منتزر instead of هنزا گلد

The SMS texts were ported verbatim from henza and still carried its brand:
the login code, the welcome message (with the app.henzagold.com link), the
two complete-profile messages and the financial-document confirm/reject.
All now say منتزر, and the welcome link is https://bnk.montzar.ir.

The login code keeps its first line ("<#> code is <CODE>") and the trailing
SMS Retriever hash unchanged, so Android autofill still works. «اپلیکشن» is
corrected to «اپلیکیشن» in the same line.

Tests: sms.service.spec OTP template. All 263 API tests pass.
Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/src/modules/admin-customers/admin-customers.service.ts

@@ -141,8 +141,8 @@ export class AdminCustomersService {
 
   /**
    * The welcome SMS the reference sends after every new customer is created
-   * (AdminController.php:378-387). Byte-identical, including the line order and
-   * the trailing PWA link; the commented-out Android/iOS lines are not sent
+   * (AdminController.php:378-387), with the brand and the PWA link changed to
+   * منتزر; same line order. The commented-out Android/iOS lines are not sent
    * there and are not sent here.
    *
    * D20 — awaiting it would let a slow or unconfigured gateway hold up the
@@ -153,11 +153,11 @@ export class AdminCustomersService {
    */
   private sendWelcomeSms(mobile: string, firstName: string, lastName: string) {
     const body =
-      'هنزا گلد\n' +
+      'منتزر\n' +
       `همکار گرامی ${firstName} ${lastName}\n` +
       `نام کاربری : ${mobile}\n` +
       'لینک pwa \n' +
-      'https://app.henzagold.com';
+      'https://bnk.montzar.ir';
 
     void this.sms.send(mobile, body).catch((e: unknown) => {
       // send() is documented never to throw; this is belt-and-braces so an