[server] - Create User Profile API: Update Phone, Settings, and KYC Status

[dark-sarge]

Location: server/src/routes/profile.ts

Description

No profile management endpoints exist beyond the implicit user creation during OTP signup. Users need to be able to retrieve and update their own profile data, and the system needs a KYC status field to support future regulatory compliance.

Acceptance Criteria

• GET /api/profile (authenticated) returns the authenticated user's profile: masked phone, registration date, role, trade count, KYC status, virtual account number, and Stellar public key.
• PATCH /api/profile (authenticated) accepts optional fields: alias (string, max 30 chars, alphanumeric), notificationsEnabled (boolean). Validates and updates the user record.
• GET /api/profile/trades (authenticated) returns the user's own trade history with pagination (?page, ?limit, ?status filter).
• A kyc_status enum column (unverified, pending, verified) is added to the users table via migration.
• PATCH /api/admin/users/:id/kyc (admin only) updates a user's KYC status.
• All profile endpoints apply the authenticate middleware; the KYC update endpoint also applies authorize("admin").

---

[eulami]

@eulami has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi. I'm highly experienced with this and will submit a decent PR within 24 hours. Kindly assign it to me.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @eulami to this issue.

[drips-wave]

Congratulations, @eulami! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @eulami: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊