refactor: enforce enum machine codes

Use owner enums for error and T-Bank protocol values with ESLint regression checks.

Preserve open wire fallbacks and keep protocol imports independent of DI and Prisma.

Verified npm ci, verify, 226 unit tests, 262 isolated e2e tests and unchanged OpenAPI.

src/modules/investments/portfolio/application/portfolio.service.ts

@@ -17,6 +17,7 @@ import { RequestContextService } from '../../../../common/logging/request-contex
 import { StructuredLogger } from '../../../../common/logging/structured-logger.service';
 import { MoneyDto } from '../../../../common/money.dto';
 import { decimal } from '../../../../integrations/tbank/decimal';
+import { isTbankErrorCode, TbankErrorCode } from '../../../../integrations/tbank/tbank-error-code';
 import {
   InstrumentMetadataService,
   type MetadataIdentity,
@@ -387,7 +388,7 @@ export class PortfolioService {
           } catch (error) {
             if (
               error instanceof Error &&
-              error.message === 'INVALID_TBANK_TOKEN'
+              isTbankErrorCode(error.message, TbankErrorCode.InvalidToken)
             ) {
               await this.access.rejectMembershipToken(attempt);
             } else await this.repository.fail(attempt);
@@ -412,7 +413,7 @@ export class PortfolioService {
   async get(userId: string, accountId: string): Promise<PortfolioDto> {
     const result = await this.read(userId, accountId);
     if (!result.data) {
-      throw new ServiceUnavailableException({ code: 'TBANK_UNAVAILABLE' });
+      throw new ServiceUnavailableException({ code: TbankErrorCode.Unavailable });
     }
     return result.data;
   }

src/modules/investments/portfolio/infrastructure/portfolio.repository.ts

@@ -4,10 +4,8 @@ import { randomUUID } from 'node:crypto';
 import type { Prisma } from '../../../../../generated/prisma/client';
 import type { PortfolioDto } from '../presentation/portfolio.dto';
 
-import {
-  tbankSourceNeedsRefresh,
-  tbankSourceTtlMs,
-} from '../../../../integrations/tbank/tbank.api';
+import { TbankErrorCode } from '../../../../integrations/tbank/tbank-error-code';
+import { tbankSourceNeedsRefresh, tbankSourceTtlMs } from '../../../../integrations/tbank/tbank.api';
 import { PrismaService } from '../../../../prisma/prisma.service';
 
 const EXPECTED_UPDATED_ACCOUNTS = 1;
@@ -152,7 +150,7 @@ export class PortfolioRepository {
         state: 'running',
         connection: { invalidToken: false },
       },
-      data: { state: 'failed', errorCode: 'TBANK_UNAVAILABLE' },
+      data: { state: 'failed', errorCode: TbankErrorCode.Unavailable },
     });
     return result.count === EXPECTED_UPDATED_ACCOUNTS;
   }