fix: harden auth and investment synchronization

Resolve A01-A10 and C01-C07 from the backend audit.
Preserve auth failures, forced candle reconciliation and forecast freshness.
Validate MOEX responses and nested HTTP errors; remove unused legacy paths.

Verified: 209 unit tests, 262 SQLite e2e tests on Linux, OpenAPI and durability.
Record the remaining macOS native SQLite abort in the audit.

src/modules/investments/operations/application/brokerage-operations.service.ts

@@ -356,7 +356,10 @@ export class BrokerageOperationsService {
           : {
               accountId,
               items: rows.map((row) => ({
-                ...mapBrokerageOperation(row.payload as TbankOperationItem),
+                ...mapBrokerageOperation(
+                  row.payload as TbankOperationItem,
+                  row.occurredAt,
+                ),
                 ...(accountId === 'all'
                   ? {
                       account: {
@@ -616,7 +619,10 @@ export class BrokerageOperationsService {
                 ),
               )
               .map((row) => ({
-                ...mapBrokerageOperation(row.payload as TbankOperationItem),
+                ...mapBrokerageOperation(
+                  row.payload as TbankOperationItem,
+                  row.occurredAt,
+                ),
                 ...(accountId === 'all'
                   ? {
                       account: {