fix(settings): paper_mode in UserResponse + bot_engine required fields + test sync

schemas.py:
- Add paper_mode: bool = False to UserResponse so frontend can distinguish
  paper vs live subscribers and skip HL API key requirement accordingly

api/user.py:
- Return paper_mode=bool(sub.paper_mode) in GET /user/{wallet}
- Fix elif-chain bug in settings validation: two independent `if` blocks
  instead of elif so both TP and SL ranges are checked when trump_enabled
- Conditional validation: TP/SL required only when trump_enabled=True;
  daily_budget_usd optional at all times
- Persist trump_enabled / macro_enabled from PUT /user/{wallet}/settings

services/bot_engine.py:
- Remove daily_budget_usd from required fields check — it is optional
  (null = no cap). Previous code silently skipped ALL trades for users
  who cleared their daily budget cap.

alembic/versions/025_module_toggles.py:
- Add trump_enabled, macro_enabled columns to subscriptions table

tests/test_production_readiness.py:
- Sync test_open_positions_requires_signed_wallet_read to patch
  verify_signed_request_any (the function now used) instead of
  verify_signed_request; update expected call kwargs accordingly

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

alembic/versions/025_module_toggles.py

@@ -0,0 +1,25 @@
+"""add trump_enabled and macro_enabled to subscriptions
+
+Revision ID: 025_module_toggles
+Revises: 024_bot_trades_released_at
+Create Date: 2026-05-27
+"""
+from alembic import op
+import sqlalchemy as sa
+
+revision = '025_module_toggles'
+down_revision = '024_bot_trades_released_at'
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column('subscriptions',
+        sa.Column('trump_enabled', sa.Boolean(), nullable=False, server_default='false'))
+    op.add_column('subscriptions',
+        sa.Column('macro_enabled', sa.Boolean(), nullable=False, server_default='false'))
+
+
+def downgrade() -> None:
+    op.drop_column('subscriptions', 'macro_enabled')
+    op.drop_column('subscriptions', 'trump_enabled')