fix: pre-launch hardening — HYPE price feed, KOL wallet cleanup, Telegram Trump alert, rate limiting, brittle test

Batch of the pre-launch audit campaign (BUG-01…14 plus three new features):

Pricing / TP-SL protection
- Add app/services/hl_price_feed.py: supplemental HL allMids poller for
  HL-native assets (HYPE, PURR) not listed on Binance. Pumps price_store +
  tp_sl_monitor.on_price_tick so bot trades on these assets keep full
  stop-loss / take-profit / trailing protection instead of max-hold only.
- Wire feed into main.py lifespan (startup task + graceful shutdown cancel).

Telegram
- Add format_trump_mention + PATH B in _dispatch: crypto-relevant Trump
  posts with no directional signal (relevant=True, signal=hold) now alert
  the public channel only (no per-subscriber noise).
- Rate limiter (slowapi) on the API; assorted bot/digest fixes.

KOL on-chain
- seed_kol_wallets.py: KOL_FEEDS coverage cross-check; reversibly deactivate
  orphaned wallets (handle not in KOL_FEEDS → can never produce divergence)
  so the scanner stops burning cycles on them.

Tests / misc
- Fix brittle test_macro_ahr999_uses_same_formula_as_scanner: mock now uses
  realistic ms timestamps so the in-progress-day drop fires, matching the
  fetcher's bar count (was 0.3179 vs 0.3178 off-by-one).
- Refresh stale notify_signal comment in truth_social.py.

Frontend reduce-action type fix lives in the sibling repo.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

app/api/user.py

@@ -231,8 +231,8 @@ async def set_user_settings(
         raise HTTPException(422, "min_confidence must be 0–100")
     if s.sys2_leverage is not None and not (1 <= s.sys2_leverage <= 10):
         raise HTTPException(422, "sys2_leverage must be 1–10")
-    if s.sys2_mode is not None and s.sys2_mode not in ("standard", "aggressive"):
-        raise HTTPException(422, "sys2_mode must be 'standard' or 'aggressive'")
+    if s.sys2_mode is not None and s.sys2_mode not in ("standard", "aggressive", ""):
+        raise HTTPException(422, "sys2_mode must be 'standard', 'aggressive', or '' (reset)")
     if s.daily_budget_usd is not None and not (0 < s.daily_budget_usd <= 100000):
         raise HTTPException(422, "daily_budget_usd must be >0 and ≤100,000 if provided")
 
@@ -280,7 +280,8 @@ async def set_user_settings(
     sub.daily_budget_usd = s.daily_budget_usd
     sub.sys2_leverage = s.sys2_leverage
     if s.sys2_mode is not None:
-        sub.sys2_mode = s.sys2_mode
+        # Empty string = reset to default; otherwise store the chosen mode.
+        sub.sys2_mode = "standard" if s.sys2_mode == "" else s.sys2_mode
     sub.active_from = af
     sub.active_until = au
     if s.trump_enabled is not None: