feat(kyc-controller): add session disclaimer fetching without sessionId

[jiexi]

Explanation

• rename fetchDisclaimers to fetchVendorDisclaimers
  • Breaking, but kyc-controller is unreleased still
• add support for fetchSessionDisclaimers without sessionId, using only country code

References

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

^{Cursor Bugbot is generating a summary for commit d58a971. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit d58a971. Configure here.}

[cursor]

One method serves two endpoints

Medium Severity

fetchSessionDisclaimers now performs both GET /sessions/{sessionId}/disclaimers and GET /disclaimers, with different response shapes. Data-service methods are meant to map to a single endpoint, and these overloads also collapse to the last signature in messenger call types, so the existing { sessionId } path no longer type-checks as a session catalog.

 

^{Triggered by project rule: Guidance for Bugbot}

^{Reviewed by Cursor Bugbot for commit d58a971. Configure here.}