Codex/resolve 551 552 553 554

[kelechiamarachi03-sys]

Adds recurring crypto withdrawals, support tickets, optional passkeys and bulk sub-account management.

• Recurring withdrawals support fixed, yield-only and percentage amounts, cadence previews, minimum skips, shared compliance and approval checks, goal holds, user alerts, atomic claims and pending-fund reservations. Destination changes pause for review.
• Support tickets provide owner-scoped threads, server-enforced internal notes, scoped administration, transactional audits, priority SLA deadlines and automatic reopening on user replies.
• Optional passkeys use standard WebAuthn verification, configured origins, session-bound single-use challenges, counter anomaly alerts and normal refreshable sessions while preserving wallet login and enrolled TOTP.
• Bulk sub-account operations share single-operation authorization and validation, execute in order, report partial failures and support complete transactional rollback. The summary reports permission distribution, limit exposure and recent activity.

Includes database migrations, rollback scripts and API documentation.

Validation: all 101 tests in 15 focused unit and HTTP integration suites pass. Lint, Prisma schema validation and OpenAPI validation pass. Repository-wide tests still report failures outside these features, and typecheck retains five pre-existing lending errors. Live database migrations were not run because a local database was unavailable.

Closes #551
Closes #552
Closes #553
Closes #554