fix(admin): close PR review blockers

Keep bot credentials out of durable command results, fail bot deletion closed when session revocation fails, reject invalid scam/fake states at every write boundary, and make direct collectible grants a single replayable PostgreSQL aggregate.

Also lock admin gift sender/message limits and add regression coverage for rollback, replay, moderation constraints, and credential redaction.

internal/rpc/convert_users.go

@@ -53,9 +53,7 @@ func tgUser(u domain.User) *tg.User {
 		Phone:         u.Phone,
 		Verified:      u.Verified,
 		Scam:          u.Scam,
-		// scam and fake are mutually exclusive in Telegram; a peer flagged as
-		// both would render neither badge on clients. scam takes precedence.
-		Fake:          u.Fake && !u.Scam,
+		Fake:          u.Fake,
 		Support:       u.Support,
 		Contact:       u.Contact,
 		MutualContact: u.Mutual,