fix(sms): every SMS says منتزر instead of هنزا گلد

The SMS texts were ported verbatim from henza and still carried its brand:
the login code, the welcome message (with the app.henzagold.com link), the
two complete-profile messages and the financial-document confirm/reject.
All now say منتزر, and the welcome link is https://bnk.montzar.ir.

The login code keeps its first line ("<#> code is <CODE>") and the trailing
SMS Retriever hash unchanged, so Android autofill still works. «اپلیکشن» is
corrected to «اپلیکیشن» in the same line.

Tests: sms.service.spec OTP template. All 263 API tests pass.
Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/src/modules/sms/sms.service.spec.ts

@@ -309,19 +309,19 @@ describe('SmsService.send', () => {
 });
 
 /**
- * The OTP text must stay byte-identical to the reference
- * (ApiMobileController.php:47) — the first line and the trailing token are the
- * Android SMS Retriever hash, and autofill breaks if either changes.
+ * The OTP text keeps the reference's shape (ApiMobileController.php:47) with
+ * the brand منتزر — the first line and the trailing token are the Android SMS
+ * Retriever hash, and autofill breaks if either changes.
  */
 describe('OTP message template', () => {
   const build = (code: string) =>
     `<#> code is ${code}\n` +
-    `رمز عبور یکبار مصرف شما جهت ورود به اپلیکشن هنزا گلد ${code} می باشد\n` +
+    `رمز عبور یکبار مصرف شما جهت ورود به اپلیکیشن منتزر ${code} می باشد\n` +
     `aMo6iFyUQaY`;
 
-  it('matches the reference byte for byte', () => {
+  it('matches the expected text byte for byte', () => {
     expect(build('1234')).toBe(
-      '<#> code is 1234\nرمز عبور یکبار مصرف شما جهت ورود به اپلیکشن هنزا گلد 1234 می باشد\naMo6iFyUQaY',
+      '<#> code is 1234\nرمز عبور یکبار مصرف شما جهت ورود به اپلیکیشن منتزر 1234 می باشد\naMo6iFyUQaY',
     );
   });