fix: harden auth and investment synchronization

Resolve A01-A10 and C01-C07 from the backend audit.
Preserve auth failures, forced candle reconciliation and forecast freshness.
Validate MOEX responses and nested HTTP errors; remove unused legacy paths.

Verified: 209 unit tests, 262 SQLite e2e tests on Linux, OpenAPI and durability.
Record the remaining macOS native SQLite abort in the audit.

src/modules/investments/instruments/application/catalog-enrichment.service.ts

@@ -1,4 +1,3 @@
-import type { TbankDividend } from '../../../../integrations/tbank/tbank.api';
 import type { MoexBondEvent } from '../../../../integrations/moex/moex.api';
 import { CandleRepository } from '../infrastructure/candle.repository';
 import { candleGaps, utcDay } from '../domain/candle-coverage';
@@ -14,11 +13,6 @@ import {
 } from '../../../../common/time';
 import { MoexClient } from '../../../../integrations/moex/moex.api';
 import { NcrRatingsClient } from '../../../../integrations/ncr/ncr.api';
-import type {
-  TbankCandle,
-  TbankFundamentals,
-} from '../../../../integrations/tbank/tbank.api';
-import type { TbankCoupon } from '../../../../integrations/tbank/tbank-market.types';
 import { previousClose, timestamp } from './instrument-market';
 import { Injectable, NotFoundException } from '@nestjs/common';
 import { randomUUID } from 'node:crypto';
@@ -29,10 +23,14 @@ import {
   tbankSourceNeedsRefresh,
   tbankSourceTtlMs,
   type TbankBond,
+  type TbankCandle,
+  type TbankCoupon,
+  type TbankDividend,
+  type TbankFundamentals,
+  type TbankLastPrice,
   type TbankShare,
+  type TbankSyncAttempt,
 } from '../../../../integrations/tbank/tbank.api';
-import type { TbankLastPrice } from '../../../../integrations/tbank/tbank-market.types';
-import type { TbankSyncAttempt } from '../../../../integrations/tbank/tbank-access.service';
 import { investmentResourceMeta } from '../../investment-resource.mapper';
 import {
   CatalogDiscoveryRepository,