feat(enakgame): game sessions, rewards, vouchers, budgets and events

EnakGame phases 1-8 of docs/tasks-enakgame.md (EG-101 to EG-803), built on the
existing EnakPoint/EnakCoin wallet (docs/rfc-enakgame.md).

Foundation (phase 1)
- Migrations 000103-000106: games extended with organization, slug, status,
  entry cost and result rules, old games archived (not deleted); budgets,
  versioned reward configs, sessions and session rewards; the ledger types
  GAME_SPEND_REFUND, GAME_REWARD and REWARD_REDEEM_REFUND; audit_logs.
- AuditLogger writes in the caller's transaction only.
- enakgame.limit.user_daily and global_daily organization settings.

Games and sessions (phases 2-4)
- Admin /marketing/enakgame: games, reward config versions (immutable but for
  status, one ACTIVE per game), budgets with non-overlapping global periods and
  a daily job opening the next month.
- Customer /customer/enakgame: start (Idempotency-Key, entry cost and config
  frozen on the session), complete (result validation, reward engine, max_reward
  cap, daily limits via game_reward_counters, one GAME_REWARD per budget),
  automatic refunds for system errors and deactivated games, and a session job.
- Reward engine: FIXED, SCORE_BASED, OUTCOME_BASED, PROBABILITY (crypto/rand),
  rounded down.

Vouchers and budgets (phases 5-6)
- Migration 000108 and 000107: vouchers, codes, redemptions, cost attribution;
  Economy Guard counters.
- STATIC and CODE_POOL redemption in one transaction with the REDEEM PIN action;
  realized cost traced through the lots to the budget that paid the reward.
- Budget metrics: realized cost, forecast, exposure and status. Migrations
  000109-000110 add the wallet_lots indexes they need, built CONCURRENTLY.

Events (phase 7)
- Migration 000111: game events, each with its own EVENT budget. Event extras
  stack per PRD §16 defaults, with event and per-customer limits.

External vouchers (phase 8)
- VoucherProvider contract, two-step PENDING redemption and a recovery job,
  tested with a fake provider. No provider adapter is registered yet, so
  EXTERNAL vouchers stay out of the catalog.

Not yet decided before release: reward rounding, event stacking, budget
exhaustion policy and thresholds (RFC §19.2). Migrations 000103-000111 have
not been run on any shared database.

Also fixes a leftover PAYMENT filter in a wallet test and a data race in a
test PIN fake.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

internal/processor/wallet_processor_test.go

@@ -721,6 +721,46 @@ func TestWalletProcessor_RejectsEntriesThatBreakTheTypeRules(t *testing.T) {
 			in.Type = constants.WalletTxTypeMigration
 			in.ReferenceType = constants.WalletRefTypeOrder
 		},
+		"GAME_REWARD in POINT": func(in *WalletCreditInput) {
+			in.Type = constants.WalletTxTypeGameReward
+			in.ReferenceType = constants.WalletRefTypeGameSession
+		},
+		"GAME_REWARD wrong reference": func(in *WalletCreditInput) {
+			in.Type = constants.WalletTxTypeGameReward
+			in.Currency = constants.WalletCurrencyCoin
+			in.ReferenceType = constants.WalletRefTypeGamePlay
+		},
+		"GAME_SPEND_REFUND in POINT": func(in *WalletCreditInput) {
+			in.Type = constants.WalletTxTypeGameSpendRefund
+			in.ReferenceType = constants.WalletRefTypeGameSession
+			in.ReversesTransactionID = ptr(uuid.New())
+		},
+		"GAME_SPEND_REFUND wrong reference": func(in *WalletCreditInput) {
+			in.Type = constants.WalletTxTypeGameSpendRefund
+			in.Currency = constants.WalletCurrencyCoin
+			in.ReferenceType = constants.WalletRefTypeGamePlay
+			in.ReversesTransactionID = ptr(uuid.New())
+		},
+		"GAME_SPEND_REFUND without source": func(in *WalletCreditInput) {
+			in.Type = constants.WalletTxTypeGameSpendRefund
+			in.Currency = constants.WalletCurrencyCoin
+			in.ReferenceType = constants.WalletRefTypeGameSession
+		},
+		"REWARD_REDEEM_REFUND in COIN": func(in *WalletCreditInput) {
+			in.Type = constants.WalletTxTypeRewardRedeemRefund
+			in.Currency = constants.WalletCurrencyCoin
+			in.ReferenceType = constants.WalletRefTypeRewardRedemption
+			in.ReversesTransactionID = ptr(uuid.New())
+		},
+		"REWARD_REDEEM_REFUND wrong reference": func(in *WalletCreditInput) {
+			in.Type = constants.WalletTxTypeRewardRedeemRefund
+			in.ReferenceType = constants.WalletRefTypeGameSession
+			in.ReversesTransactionID = ptr(uuid.New())
+		},
+		"REWARD_REDEEM_REFUND without source": func(in *WalletCreditInput) {
+			in.Type = constants.WalletTxTypeRewardRedeemRefund
+			in.ReferenceType = constants.WalletRefTypeRewardRedemption
+		},
 	}
 	for name, mutate := range credits {
 		t.Run("credit/"+name, func(t *testing.T) {
@@ -762,6 +802,27 @@ func TestWalletProcessor_RejectsEntriesThatBreakTheTypeRules(t *testing.T) {
 			in.Type = constants.WalletTxTypeRewardRedeem
 			in.ReferenceType = constants.WalletRefTypeOrder
 		},
+		"GAME_SPEND wrong reference": func(in *WalletDebitInput) {
+			in.Type = constants.WalletTxTypeGameSpend
+			in.Currency = constants.WalletCurrencyCoin
+			in.ReferenceType = constants.WalletRefTypeRewardRedemption
+		},
+		"GAME_REWARD as debit": func(in *WalletDebitInput) {
+			in.Type = constants.WalletTxTypeGameReward
+			in.Currency = constants.WalletCurrencyCoin
+			in.ReferenceType = constants.WalletRefTypeGameSession
+		},
+		"GAME_SPEND_REFUND as debit": func(in *WalletDebitInput) {
+			in.Type = constants.WalletTxTypeGameSpendRefund
+			in.Currency = constants.WalletCurrencyCoin
+			in.ReferenceType = constants.WalletRefTypeGameSession
+			in.ReversesTransactionID = ptr(uuid.New())
+		},
+		"REWARD_REDEEM_REFUND as debit": func(in *WalletDebitInput) {
+			in.Type = constants.WalletTxTypeRewardRedeemRefund
+			in.ReferenceType = constants.WalletRefTypeRewardRedemption
+			in.ReversesTransactionID = ptr(uuid.New())
+		},
 	}
 	for name, mutate := range debits {
 		t.Run("debit/"+name, func(t *testing.T) {
@@ -777,6 +838,39 @@ func TestWalletProcessor_RejectsEntriesThatBreakTheTypeRules(t *testing.T) {
 	}
 }
 
+func TestWalletProcessor_AcceptsEnakGameTypes(t *testing.T) {
+	e := newWalletTestEnv(t)
+	c := e.customer()
+	coin := func(txType, refType string, amount int64) WalletEntry {
+		return WalletEntry{
+			CustomerID: c, Currency: constants.WalletCurrencyCoin, Type: txType, Amount: amount,
+			ReferenceType: refType, ReferenceID: uuid.New(), Description: txType,
+		}
+	}
+
+	e.credit(t, WalletCreditInput{WalletEntry: coin(constants.WalletTxTypeGameReward, constants.WalletRefTypeGameSession, 30)})
+	spend, err := e.p.Debit(e.ctx, WalletDebitInput{WalletEntry: coin(constants.WalletTxTypeGameSpend, constants.WalletRefTypeGameSession, 10)})
+	require.NoError(t, err)
+	_, err = e.p.Debit(e.ctx, WalletDebitInput{WalletEntry: coin(constants.WalletTxTypeGameSpend, constants.WalletRefTypeGamePlay, 5)})
+	require.NoError(t, err, "the old spin still references GAME_PLAY")
+	refund := coin(constants.WalletTxTypeGameSpendRefund, constants.WalletRefTypeGameSession, 10)
+	refund.ReversesTransactionID = &spend.Transaction.ID
+	e.credit(t, WalletCreditInput{WalletEntry: refund, Lots: spend.CarryOver()})
+
+	e.credit(t, earn(c, 100, nil))
+	redeemed, err := e.p.Debit(e.ctx, redeem(c, 40))
+	require.NoError(t, err)
+	back := redeem(c, 40).WalletEntry
+	back.Type = constants.WalletTxTypeRewardRedeemRefund
+	back.ReversesTransactionID = &redeemed.Transaction.ID
+	e.credit(t, WalletCreditInput{WalletEntry: back, Lots: redeemed.CarryOver()})
+
+	wallet, err := e.repo.GetWallet(e.ctx, c)
+	require.NoError(t, err)
+	assert.EqualValues(t, 25, wallet.CoinBalance)
+	assert.EqualValues(t, 100, wallet.PointBalance)
+}
+
 func TestWalletProcessor_UnknownCustomer(t *testing.T) {
 	e := newWalletTestEnv(t)
 	_, err := e.p.Credit(e.ctx, earn(uuid.New(), 10, nil))