feat: wire live Fineract M1 to Central Bank UI and Office 24 journal seed

Add a read-only money-supply endpoint for Office 24 dashboards, pass Fineract env through deploy scripts, and provide a seed script for the opening Dr 1410 / Cr 2100 journal.

Co-authored-by: Cursor <cursoragent@cursor.com>

services/settlement-middleware/src/api/routes/settlement.ts

@@ -1,6 +1,6 @@
 import { Router, type Request, type Response } from 'express';
 import type { ExternalTransferRequest, TradeFinanceInstrument, TokenLoadRequest, TransferRequest } from '@dbis/settlement-core';
-import { loadOmnlChainRegistry, getActiveChains } from '@dbis/settlement-core';
+import { buildMoneySupplySnapshot, loadOmnlChainRegistry, getActiveChains } from '@dbis/settlement-core';
 import { loadConfig, loadOfficeProfile, settlementOfficeId } from '../../config';
 import {
   getMoneySupply,
@@ -8,9 +8,11 @@ import {
   processExternalTransfer,
 } from '../../workflows/external-transfer';
 import { processTokenLoad } from '../../workflows/token-load';
-import { processTransfer } from '../../workflows/transfer';import { bindOffice24 } from '../../workflows/office-scope';
+import { processTransfer } from '../../workflows/transfer';
+import { bindOffice24 } from '../../workflows/office-scope';
 import { settlementStore } from '../../store/settlement-store';
 import { processSwiftInbound } from '../../workflows/swift-inbound';
+import { fetchGlBalances } from '../../adapters/fineract';
 
 function requireApiKey(req: Request, res: Response): boolean {
   const cfg = loadConfig();
@@ -57,6 +59,30 @@ export function createSettlementRouter(): Router {
     });
   });
 
+  router.get('/money-supply/public', async (_req, res) => {
+    const cfg = loadConfig();
+    const allow =
+      cfg.production.onlineBankMode || process.env.OMNL_PUBLIC_MONEY_SUPPLY === '1';
+    if (!allow) {
+      res.status(404).json({ error: 'Public money supply disabled' });
+      return;
+    }
+    try {
+      const balances = await fetchGlBalances(officeId);
+      const snapshot = buildMoneySupplySnapshot(officeId, balances);
+      res.json({
+        ...snapshot,
+        fineractLive: Object.keys(balances).length > 0,
+        interoffice: {
+          dueFromHeadOffice: balances['1410'] ?? '0',
+          gl1410: balances['1410'] ?? '0',
+        },
+      });
+    } catch (e) {
+      res.status(500).json({ error: e instanceof Error ? e.message : String(e) });
+    }
+  });
+
   router.get('/money-supply', async (req, res) => {
     if (!requireApiKey(req, res)) return;
     try {