Add KYC Check and AML reset workflow

[TaprootFreak]

What

• add a guarded Set to Check action next to the KYC status in Compliance review
• call the dedicated audited API transition with stale-state protection and the authenticated actor
• expose reset controls for eligible incomplete BuyCrypto transactions with an AML result
• route every BuyCrypto reset UI through the guarded review-reset endpoint
• identify reset targets by BuyCrypto ID, transaction ID, AML state, and BuyCrypto status
• apply one fail-closed eligibility rule to the review card, pending AML form, and call queue
• consume the authoritative server-side refund/payout/return blocker
• require explicit confirmations, prevent duplicate submissions, and reload authoritative state

Why

Compliance operators need a frontend-only workflow to return a user to KYC review and then reset a blocked BuyCrypto AML check without browser developer tools.

Safety

• the KYC action is hidden when the status is already Check
• AML reset requires KYC Check, an eligible BuyCrypto state, the expected AML snapshot, and a separate confirmation
• completed, stopped, batched, chargeback, payout, return, or incomplete-support-data states do not expose Reset
• missing fields from an older API fail closed
• a non-UI call-queue guard prevents bypassing reset eligibility
• mutation and reload failures are reported with accurate partial-success semantics
• no production data was mutated during development or verification

Verification

• full Jest suite: 63 suites and 622 tests passed
• focused AML panel suite: 11 tests passed
• lint, formatting, and diff checks passed
• two independent final review passes on the exact API commit and frontend diff: 0 findings
• all new commits are validly signed

Related

• API: Add audited KYC and AML review workflow api#4586

[TaprootFreak]

Final review completed: two independent review passes with 0 remaining findings. Verification includes 63 Jest suites with 621 tests, lint, the fully intercepted Playwright Compliance flow, code and widget builds, and all required GitHub checks. All BuyCrypto reset surfaces now use the guarded review-reset endpoint and the same fail-closed eligibility rule. No production data was mutated during development or verification.

[TaprootFreak]

Final verification on exact head ff58b226174d8beb8b69e42568ff22e129fb57cc: two independent final review passes reported 0 findings across the API and frontend changes. Local verification passed with lint, 11 focused tests, and the full 63-suite / 622-test run. All 6 GitHub checks are green, and the final commit is validly signed. No production data was mutated and this PR was not merged.