fix: align DAEMON_ERRORS string checks with canonical constants

The credential daemon error retry logic in DaemonKeyStore used locally
hardcoded strings ('SESSION_EXPIRED', 'SOURCE_AUTH_DENIED') that did not
match the actual error values sent by the credential daemon (defined in
constants.ts as 'invalid or expired session', 'invalid source
authentication'). This caused the session refresh/retry path to silently
never trigger, permanently blocking all chain operations after a session
expiry.

## Changes
- `modules/key_store.ts`: Remove local DAEMON_ERRORS shadow object;
  import DAEMON_ERRORS from constants.ts instead so checks always stay
  in sync with the daemon's actual error messages.
- `modules/chain_orders.ts`: Remove stale unused DAEMON_ERRORS import.
- `tests/test_uncertain_broadcast.ts`: Update mock error strings to
  match the canonical DAEMON_ERRORS values so the tests actually
  exercise the retry path.

## Testing Notes
- Existing test suite covers the retry path (UNC-008h, UNC-008i);
  mock strings now match real daemon output.

Author: froooze

modules/chain_orders.ts

@@ -95,7 +95,7 @@
 
 const { BitShares, createAccountClient, waitForConnected, withTimeout } = require('./bitshares_client');
 const { floatToBlockchainInt, blockchainToFloat, normalizeInt, validateOrderAmountsWithinLimits } = require('./order/utils/math');
-const { FILL_PROCESSING, TIMING, NATIVE_CLIENT, DAEMON_ERRORS } = require('./constants');
+const { FILL_PROCESSING, TIMING, NATIVE_CLIENT } = require('./constants');
 const Format = require('./order/format');
 const { toFiniteNumber } = Format;
 const AsyncLock = require('./order/async_lock');

modules/key_store.ts

@@ -7,7 +7,7 @@ const {
     executeOperationsViaCredentialDaemon,
     BroadcastUncertainError,
 } = require('./dexbot_credential_client');
-const { TIMING } = require('./constants');
+const { TIMING, DAEMON_ERRORS } = require('./constants');
 const { path } = require('./path_api');
 const { PATHS } = require('./paths');
 const { getStorage } = require('./storage');
@@ -123,10 +123,6 @@ export class DaemonKeyStore implements KeyStore {
                 };
             } catch (err: any) {
                 if (err instanceof BroadcastUncertainError) throw err;
-                const DAEMON_ERRORS = {
-                    SESSION_EXPIRED: 'SESSION_EXPIRED',
-                    SOURCE_AUTH_DENIED: 'SOURCE_AUTH_DENIED',
-                };
                 if (err.message && (err.message.includes(DAEMON_ERRORS.SESSION_EXPIRED) || err.message.includes(DAEMON_ERRORS.SOURCE_AUTH_DENIED))) {
                     const isSourceAuthError = err.message.includes(DAEMON_ERRORS.SOURCE_AUTH_DENIED);
                     if (isSourceAuthError) {

tests/test_uncertain_broadcast.ts

@@ -689,7 +689,7 @@ async function testExecuteBatchRetriesExpiredDaemonSessionOnly() {
     const transport = installFakeCredentialDaemonTransport((request, socket) => {
         requestCount++;
         if (requestCount === 1) {
-            socket.endLine({ success: false, error: 'SESSION_EXPIRED' });
+            socket.endLine({ success: false, error: 'invalid or expired session' });
         } else {
             assert.strictEqual(request.sessionId, 'session-2', 'retry should use renegotiated session');
             socket.endLine({ success: true, raw: { ok: true }, operation_results: [['1', '1.7.1']] });
@@ -726,7 +726,7 @@ async function testExecuteBatchRetryPreservesUncertainBroadcastHandling() {
     const transport = installFakeCredentialDaemonTransport((request, socket) => {
         requestCount++;
         if (requestCount === 1) {
-            socket.endLine({ success: false, error: 'SESSION_EXPIRED' });
+            socket.endLine({ success: false, error: 'invalid or expired session' });
         } else {
             assert.strictEqual(request.sessionId, 'session-2', 'retry should use renegotiated session');
             socket.endLine({ success: false, code: 'BROADCAST_DEADLINE', error: 'inner broadcast deadline exceeded on retry' });