fix: public ledger endpoint for dashboard money-supply

Add /public/money-supply route and restrict office param to numeric IDs so
NPM proxies no longer hit the authenticated /money-supply/:id handler.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend-dapp/src/features/central-bank/useCentralBank.ts

@@ -13,9 +13,12 @@ export type MoneySupply = {
 };
 
 async function loadMoneySupply(): Promise<MoneySupply | null> {
-  const publicRes = await fetch(settlementApi('/money-supply/public'));
+  const publicRes = await fetch(settlementApi('/public/money-supply'));
   if (publicRes.ok) return publicRes.json();
 
+  const legacyRes = await fetch(settlementApi('/money-supply/public'));
+  if (legacyRes.ok) return legacyRes.json();
+
   const apiKey = import.meta.env.VITE_OMNL_API_KEY;
   if (!apiKey) return null;
 

frontend-dapp/src/features/office24/useOffice24.ts

@@ -24,7 +24,7 @@ export function useOffice24() {
         fetch(settlementApi('/office')).then((r) => r.json()),
         fetch(settlementApi('/tokens/m2')).then((r) => r.json()),
         fetch(exchangeApi('/health')).then((r) => r.json()),
-        fetch(settlementApi('/money-supply/public')).then((r) => (r.ok ? r.json() : null)),
+        fetch(settlementApi('/public/money-supply')).then((r) => (r.ok ? r.json() : null)),
       ]);
       setOffice(o);
       setTokens(Array.isArray(t.tokens) ? t.tokens : []);