Enhance ledger operations and referral lifecycle

Add traceable ledger filtering and permanent referral codes so operators can investigate credit activity without weakening immutable accounting guarantees.

src/main/kotlin/com/osglab/account/Application.kt

@@ -115,7 +115,6 @@ import com.osglab.account.features.inviteweb.InviteWebConfig
 import com.osglab.account.features.inviteweb.InviteOpenRecorder
 import com.osglab.account.features.inviteweb.ReferralLookupPort
 import com.osglab.account.features.inviteweb.configureInviteWebRoutes
-import com.osglab.account.features.referrals.domain.ReferralException
 import com.osglab.account.features.referrals.routes.referralRoutes
 import com.osglab.account.features.referrals.services.ReferralOperations
 import com.osglab.account.features.referrals.services.ReferralService
@@ -312,7 +311,7 @@ fun Application.module() {
         rateLimit(ACCOUNT_RATE_LIMIT) {
             accountRoutes(koin.get())
             creditRoutes(koin.get(), koin.get())
-            referralRoutes(koin.get(), koin.get())
+            referralRoutes(koin.get(), appConfig.inviteBaseUrl, koin.get())
             storeKitRoutes(koin.get())
         }
         rateLimit(GATEWAY_RATE_LIMIT) {
@@ -519,13 +518,8 @@ fun accountServerModule(config: AppConfig): Module = module {
                 )
             }
             get<AccountService>().seedDisplayName(accountId, displayName)
-            try {
-                get<ReferralOperations>().getOrCreateCode(accountId)
-            } catch (exception: CancellationException) {
-                throw exception
-            } catch (_: ReferralException) {
-                // Referral eligibility must not make account sign-in unavailable.
-            }
+            // Referral provisioning is intentionally handled by /v1/referrals/me
+            // after authentication so referral storage can never block sign-in.
         }
     }
     single {
@@ -585,10 +579,9 @@ fun accountServerModule(config: AppConfig): Module = module {
         val transactions = get<BillingTransactionRunner>()
         ReferralLookupPort { code ->
             transactions.inTransaction { unit ->
-                val referralCode = unit.referrals.findCode(code)
-                referralCode?.campaignId
-                    ?.let(unit.referrals::findCampaign)
-                    ?.isActive(Instant.now()) == true
+                // Invitation codes are permanent account identifiers. Campaign
+                // availability is evaluated only when an invitee redeems one.
+                unit.referrals.findCode(code) != null
             }
         }
     }