feat(settlement): add M3 and M4 money layers for full M0-M4 production

Extend settlement-core with GL 2300 token liabilities (M3) and near-money aggregate (M4), wire middleware workflows and dashboards to expose all five layers end-to-end.

Co-authored-by: Cursor <cursoragent@cursor.com>

services/token-aggregation/src/api/routes/omnl.ts

@@ -332,7 +332,7 @@ router.get('/omnl/health', async (req: Request, res: Response) => {
 });
 
 /**
- * POST /omnl/settlement/token-load — M2 fiat-backed token mint (Office 24 settlement).
+ * POST /omnl/settlement/token-load — M2→M3 fiat-backed token mint (Office 24 settlement).
  */
 router.post('/omnl/settlement/token-load', async (req: Request, res: Response) => {
   const { lineId, amount, recipient, settlementRef, dryRun, symbol, tokenAddress } = req.body as {
@@ -370,13 +370,13 @@ router.post('/omnl/settlement/token-load', async (req: Request, res: Response) =
       symbol: symbol ?? null,
       tokenAddress: tokenAddress ?? null,
       settlementRef: settlementRef ?? null,
-      moneyLayer: 'M2',
+      moneyLayer: 'M3',
       loadFromGl: '2200',
       creditGl: '2300',
       capabilities,
       txHash: null,
       chainRailConfigured: chainRailConfigured(),
-      message: 'M2 token load validated — set SETTLEMENT_ALLOW_CHAIN_MINT_EXECUTE=1 to mint on-chain',
+      message: 'M2→M3 token load validated — set SETTLEMENT_ALLOW_CHAIN_MINT_EXECUTE=1 to mint on-chain',
     });
     return;
   }
@@ -406,10 +406,10 @@ router.post('/omnl/settlement/token-load', async (req: Request, res: Response) =
       symbol: symbol ?? null,
       tokenAddress,
       settlementRef: settlementRef ?? null,
-      moneyLayer: 'M2',
+      moneyLayer: 'M3',
       capabilities,
       txHash,
-      message: 'M2 token minted on Chain 138 — tradable, swappable, transferable',
+      message: 'M3 token minted on Chain 138 — tradable, swappable, transferable',
     });
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);