feat: Enhance SMS verification with new token handling and update API key

src/CMSMicroservice.Application/Common/Interfaces/IKavenegarService.cs

@@ -13,5 +13,10 @@ public interface IKavenegarService
     /// <summary>
     /// ارسال پیامک با قالب (VerifyLookup)
     /// </summary>
-    Task VerifyLookupAsync(string mobile, string token, string template = "Afrino");
+    Task VerifyLookupAsync(string mobile, string token, string template = "OTP");
+
+    /// <summary>
+    /// ارسال پیامک با قالب و توکن دوم (VerifyLookup) — مثلاً برای قراردادها
+    /// </summary>
+    Task VerifyLookupAsync(string mobile, string token, string token2, string template);
 }

src/CMSMicroservice.Application/OtpTokenCQ/EventHandlers/CreateNewOtpTokenEventHandlers/CreateNewOtpTokenEventHandler.cs

@@ -26,12 +26,12 @@ public class CreateNewOtpTokenEventHandler : INotificationHandler<CreateNewOtpTo
         {
             var purpose = notification.Item.Purpose?.ToLowerInvariant();
 
-            // برای امضای قرارداد، پیامک ساده با GUID ارسال شود
+            // برای امضای قرارداد، از الگوی Sign-Contract با GUID به عنوان token2 استفاده شود
             if ((purpose == "signcontract" || purpose == "signclubcontract") 
                 && !string.IsNullOrEmpty(notification.SignGuid))
             {
-                var message = $"کد تایید امضای قرارداد: {notification.PlainCode}\nشناسه قرارداد: {notification.SignGuid}";
-                await _kavenegarService.SendAsync(notification.Item.Mobile, message);
+                await _kavenegarService.VerifyLookupAsync(
+                    notification.Item.Mobile, notification.PlainCode, notification.SignGuid, "Sign-Contract");
             }
             else
             {

src/CMSMicroservice.Application/UserCQ/Commands/CreateNewOtpToken/CreateNewOtpTokenCommandHandler.cs

@@ -72,11 +72,10 @@ public class CreateNewOtpTokenCommandHandler : IRequestHandler<CreateNewOtpToken
 
         try
         {
-            // برای امضای قرارداد، شناسه GUID هم در پیامک ارسال شود
+            // برای امضای قرارداد، از الگوی Sign-Contract با GUID به عنوان token2 استفاده شود
             if ((purpose == "signcontract" || purpose == "signclubcontract") && !string.IsNullOrEmpty(request.SignGuid))
             {
-                var message = $"کد تایید امضای قرارداد: {code}\nشناسه قرارداد: {request.SignGuid}";
-                await _kavenegarService.SendAsync(mobile, message);
+                await _kavenegarService.VerifyLookupAsync(mobile, code, request.SignGuid, "Sign-Contract");
             }
             else
             {

src/CMSMicroservice.Infrastructure/Services/KavenegarService.cs

@@ -72,7 +72,7 @@ public class KavenegarService : IKavenegarService
     }
 
     /// <inheritdoc />
-    public async Task VerifyLookupAsync(string mobile, string token, string template = "Afrino")
+    public async Task VerifyLookupAsync(string mobile, string token, string template = "OTP")
     {
         if (!_smsSettings.Enabled)
         {
@@ -106,4 +106,41 @@ public class KavenegarService : IKavenegarService
             throw;
         }
     }
+
+    /// <inheritdoc />
+    public async Task VerifyLookupAsync(string mobile, string token, string token2, string template)
+    {
+        if (!_smsSettings.Enabled)
+        {
+            _logger.LogInformation("SMS is disabled. Skipping VerifyLookup to {Mobile}", mobile);
+            return;
+        }
+
+        if (_kavenegarApi == null)
+        {
+            _logger.LogWarning("⚠️ Kavenegar API not initialized, cannot send VerifyLookup");
+            return;
+        }
+
+        try
+        {
+            await Task.Run(() =>
+            {
+                var result = _kavenegarApi.VerifyLookup(
+                    receptor: mobile,
+                    token: token,
+                    token2: token2,
+                    token3: "",
+                    template: template);
+
+                _logger.LogInformation("📱 VerifyLookup SMS sent to {Mobile} with template {Template} (token2), MessageId: {MessageId}",
+                    mobile, template, result.Messageid);
+            });
+        }
+        catch (Exception ex)
+        {
+            _logger.LogError(ex, "❌ Kavenegar error sending VerifyLookup to {Mobile}: {Message}", mobile, ex.Message);
+            throw;
+        }
+    }
 }

src/CMSMicroservice.WebApi/appsettings.Staging.json

@@ -44,7 +44,7 @@
   "Sms": {
     "Enabled": true,
     "Provider": "Kavenegar",
-    "KavenegarApiKey": "497263626F32626A48685A6137524C4F78575A766E4C74694A556B79317648424964655030682B554545413D",
+    "KavenegarApiKey": "43676A4E786A6C50452F2F6252507939346A5145764B33566B456454374E657A614468706658656D6534593D",
     "Sender": "1000001110100"
   },
   "DayaPayment": {

src/CMSMicroservice.WebApi/appsettings.json

@@ -51,7 +51,7 @@
   "Sms": {
     "Enabled": true,
     "Provider": "Kavenegar",
-    "KavenegarApiKey": "497263626F32626A48685A6137524C4F78575A766E4C74694A556B79317648424964655030682B554545413D",
+    "KavenegarApiKey": "43676A4E786A6C50452F2F6252507939346A5145764B33566B456454374E657A614468706658656D6534593D",
     "Sender": "1000001110100"
   },
   "DayaPayment": {