Pre-launch hardening: KOL module, Telegram, scanners, WS resilience

Big-picture changes since b941223:

KOL pipeline (new) — Substack/podcast/blog RSS → AI ticker extraction →
on-chain wallet diff → talks-vs-trades divergence detection. Daily polls,
19 feeds, divergence emits Post + Telegram fan-out.

Telegram push (new) — walletless free tier + wallet-linked Pro upgrade,
in-bot preference commands (/trump /btc /funding /kol /conf /quiet),
signed-envelope API for dashboard. Disconnect-wallet keeps free
subscription.

BTC funding-rate reversal scanner (new) — hourly cron, 30d cumulative
funding threshold + mean-revert + 7d price confirm, emits via
/api/signals/ingest. BTC bottom-reversal scanner promoted to System 2.

WS broadcast rewrite — per-client send timeout + parallel fan-out
(asyncio.gather). Fixes "Binance WS no close frame" reconnect storms +
APScheduler 11-min job misses, both caused by one slow client stalling
the kline loop.

Error visibility — three silent-error sites (trumpstruth/truth_social
fetchers, funding_reversal scanner) now include exception type name so
httpx ConnectError-style empty-message errors stop logging blank lines.
Telegram bot loop now classifies ReadTimeout vs network vs unknown +
logger.exception for the unknown bucket.

Security hygiene — trumpsignal.db untracked from git (held subscriber
wallets + encrypted HL keys + 22 bot trades); .gitignore now blocks
*.db/.next/backups. CORS only allows FRONTEND_URL in production.

New ops scripts —
  - scripts/preflight.py: env/DB/Telegram/AI auth verification gate
  - scripts/backup_db.sh: cron-friendly daily DB backup (SQLite + Postgres)
  - scripts/seed_kol_wallets.py: idempotent KOL on-chain wallet seeder

15 new Alembic migrations (007-021) covering convex strategy fields,
phase-1 safety, two-system frozen exits, invalidation prices, dynamic
SYS2 leverage, staged de-risk + pyramiding, peak gain tracking, risk
mode, auto-trade + grow flags, KOL module, KOL on-chain, KOL divergence,
Telegram bindings + walletless.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

alembic/versions/007_convex_strategy_fields.py

@@ -0,0 +1,40 @@
+"""Convex-strategy fields: trailing stop, longer hold, manual window.
+
+These columns let the bot run trend-capture (asymmetric payoff) instead of
+mean-reversion scalping:
+
+  - trailing_stop_pct      : Trail distance once profit > activate threshold.
+                             None = use fixed take_profit_pct (legacy behaviour).
+  - trailing_activate_at_pct: Profit % at which trailing kicks in.
+  - max_hold_hours         : Replaces the hardcoded 1-hour cap. Default 168 (7 days)
+                             so runners can run.
+  - manual_window_until    : One-shot "enable for N hours" override. When set and
+                             in the future, bot trades regardless of active_from /
+                             active_until schedule. NULL = use schedule.
+"""
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "007"
+down_revision: Union[str, None] = "006"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    with op.batch_alter_table("subscriptions") as batch_op:
+        batch_op.add_column(sa.Column("trailing_stop_pct",       sa.Float(),    nullable=True))
+        batch_op.add_column(sa.Column("trailing_activate_at_pct", sa.Float(),   nullable=True))
+        batch_op.add_column(sa.Column("max_hold_hours",          sa.Integer(),  nullable=False, server_default="168"))
+        batch_op.add_column(sa.Column("manual_window_until",     sa.DateTime(), nullable=True))
+
+
+def downgrade() -> None:
+    with op.batch_alter_table("subscriptions") as batch_op:
+        batch_op.drop_column("manual_window_until")
+        batch_op.drop_column("max_hold_hours")
+        batch_op.drop_column("trailing_activate_at_pct")
+        batch_op.drop_column("trailing_stop_pct")