Fix/scopes erasure travelrule

[dorismaduegbunam]

This PR resolves four issues:

closes #390 closes #395 closes #394 closes #391

Issue #390 - API key scopes enforcement
Added requireScope guards to all write endpoints matching their USER_SCOPES entries:

deposit.ts - requireScope('deposit:write')
goals.ts - requireScope('goals:write') on POST/PATCH/DELETE
recurring-deposits.ts - requireScope('recurring_deposits:write') on POST/PATCH/DELETE
strategies.ts - requireScope('strategies:write') on publish
webhooks.ts - requireScope('webhooks:manage') on POST/PATCH/DELETE
vault.ts - requireScope('vault:write') on build-transaction
alerts.ts - requireScope('alerts:manage') on POST/PATCH/DELETE
fiat.ts - requireScope('fiat:write') on create order
Issue #395 - Root documentation
Added README.md (project overview, quickstart, env vars, docker-compose) and CONTRIBUTING.md (local setup, test/lint/typecheck, PR conventions, issue-to-PR mapping).

Issue #394 - GDPR/CCPA erasure job
Added src/jobs/erasureJob.ts with:

Erasure policies map (DELETE/ANONYMIZE/IMMUTABLE)
erasureJob(userId, dryRun) function returning per-model results
eraseUserData(userId, dryRun) wrapper with summary
Admin endpoint POST /api/admin/erasure with erasure:write scope and dry-run mode
Issue #391 - Travel Rule records
Updated detectTravelRule to lookup user data and populate originator/beneficiary JSON fields with wallet address and display name. Status transitions to READY when data available, PENDING_DATA when missing. Added unit tests for both paths.

[drips-wave]

@dorismaduegbunam Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[Abidoyesimze]

pls fix ci

[dorismaduegbunam]

please review @Abidoyesimze