feat(bat-053): 그날-시작 KIS 인증정보 fetch + fail-safe 로드 (REQ-112~115)

REQ-112: BrokerCredentialPayload/TradingContext 데이터클래스 + PortfolioHubReadPort.fetch_broker_credential() 포트 메서드 + hub_read 어댑터(_fetch_user_info 헬퍼 추출) + stub_read 결정론 stub
REQ-113: DaemonInstanceConfig/DaemonConfig.credential_fetch_enabled opt-in(기본 False) + TOML 파싱 + break-glass(TREX_KIS_BROKER_BREAK_GLASS) 감지
REQ-114: SnapshotScheduler._maybe_fetch_credential() — fail-closed 3조건(unavailable/broker-null/trading_disabled) + CRITICAL 알람 DAY_START_LOAD_FAILED + IntentService entry_allowed_fn 게이트(BuyIntent 차단, SellIntent 통과)
REQ-115: 그날 고정 캐시(_cached_credential/_credential_date) — 동일 날짜 재fetch 방지 + app_secret 메모리 한정(Redis 미기록)

스텁 기반 구현: 실 portfolio-hub/네트워크 없이 AC 전부 단위 테스트.
회귀: credential_fetch_enabled=False(기본) 경로 byte-for-byte 보존.
745 passed, 47 skipped (0 failed).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VHtM5Ws1HKCKQ4JGi6GRb5

trex_core/runtime/daemon.py

@@ -169,14 +169,6 @@ class Daemon:
         self.pause_store = PostgreSQLPauseStore(config.dsn)
         # BAT-050 / REQ-102: durable reconcile-warning store (slot_id PK).
         self.warn_store = PostgreSQLReconcileWarningStore(config.dsn)
-        self.intent_service = IntentService(
-            self.slot_service, self.slot_repo, self.intent_store,
-            resolve_symbol=self._resolve_symbol,
-            instance_key=config.instance_key,
-            max_active_slots=config.max_active_slots,  # dcy-020: asset-centric gate
-            default_order_timeout_sec=config.default_order_timeout_sec,  # dcy-022
-            warn_store=self.warn_store,  # BAT-050 / REQ-104: reconcile-warning gate
-        )
         # BAT-012: day-scoped kill-switch exclusion store + service.
         self.killswitch_store = PostgreSQLKillSwitchStore(config.dsn)
         self.portfolio_read = _build_portfolio_read(config)
@@ -223,6 +215,23 @@ class Daemon:
             instance_key=config.instance_key,
             alarm_emitter=self.alarm_emitter,  # dcy-033 / REQ-100
             warn_store=self.warn_store,  # BAT-050 / REQ-103: durable reconcile-warning
+            credential_fetch_enabled=config.credential_fetch_enabled,  # dcy-036 / REQ-113
+        )
+        # dcy-036 / REQ-114: wire entry_allowed_fn after snapshot_scheduler is created.
+        # When credential_fetch_enabled=False (default), entry_allowed_fn=None = no gate.
+        entry_allowed_fn = (
+            self.snapshot_scheduler.get_entry_allowed
+            if config.credential_fetch_enabled
+            else None
+        )
+        self.intent_service = IntentService(
+            self.slot_service, self.slot_repo, self.intent_store,
+            resolve_symbol=self._resolve_symbol,
+            instance_key=config.instance_key,
+            max_active_slots=config.max_active_slots,  # dcy-020: asset-centric gate
+            default_order_timeout_sec=config.default_order_timeout_sec,  # dcy-022
+            warn_store=self.warn_store,  # BAT-050 / REQ-104: reconcile-warning gate
+            entry_allowed_fn=entry_allowed_fn,  # dcy-036 / REQ-114: day-start gate
         )
         self.execution = ExecutionService(
             self.slot_service, self.slot_repo, self.broker,