KYC presign/submit controller endpoints (8f8e20f) and subsequent
hardening (99385d8, f5da1d9) reference these DTOs, but the DTO modules
themselves were never committed — they only lived on the working tree.
Security Engineer flagged the blocker on TEC-2750.
- Commit SubmitKycDto and GenerateKycUploadUrlsDto so auth.controller
builds from a clean checkout.
- Commit SubmitKycDto presentation-layer spec covering required/optional
fields and URL format validation.
- Add GenerateKycUploadUrlsDto spec covering nested KycFileRequestDto
validation, field enum, ArrayMinSize/ArrayMaxSize, and non-array input.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>