fix: rewrite citizenship workflow to referral-based model

- Replace governance-based KYC with trustless referral workflow
- New 3-step flow: applyForCitizenship -> approveReferral -> confirmCitizenship
- Fix FOUNDER_ADDRESS (was Alice test address)
- Use applications storage instead of legacy pendingKycApplications
- Add approveReferral, cancelApplication, confirmCitizenship functions
- Rewrite KycApprovalTab as referrer approval panel (no governance)
- Fix InviteUserModal to use peopleApi for referral pallet
- Add pending approvals section to ReferralDashboard

web/src/pages/BeCitizen.tsx

@@ -176,8 +176,8 @@ const BeCitizen: React.FC = () => {
               <CardContent className="text-gray-700 font-medium space-y-2 text-sm">
                 <p>✓ Fill detailed KYC application</p>
                 <p>✓ Data encrypted with ZK-proofs</p>
-                <p>✓ Submit for admin approval</p>
-                <p>✓ Receive your Welati Tiki NFT</p>
+                <p>✓ Your referrer approves your identity</p>
+                <p>✓ Confirm and receive your Welati Tiki NFT</p>
               </CardContent>
             </Card>