fix(auth): JwtStrategy.validate() return id not sub

All 6 service strategies were returning { sub } but controllers use req.user.id.
Change return value from { sub: payload.sub } to { id: payload.sub } so that
req.user.id resolves correctly in all protected controllers.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/services/clearing-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -13,6 +13,6 @@ export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
   }
 
   async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
-    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+    return { id: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
   }
 }

backend/services/compliance-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -13,6 +13,6 @@ export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
   }
 
   async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
-    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+    return { id: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
   }
 }

backend/services/issuer-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -13,6 +13,6 @@ export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
   }
 
   async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
-    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+    return { id: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
   }
 }

backend/services/notification-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -13,6 +13,6 @@ export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
   }
 
   async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
-    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+    return { id: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
   }
 }

backend/services/telemetry-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -13,6 +13,6 @@ export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
   }
 
   async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
-    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+    return { id: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
   }
 }

backend/services/user-service/src/infrastructure/strategies/jwt.strategy.ts

@@ -13,6 +13,6 @@ export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
   }
 
   async validate(payload: { sub: string; role: string; kycLevel: number; type: string }) {
-    return { sub: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
+    return { id: payload.sub, role: payload.role, kycLevel: payload.kycLevel };
   }
 }