feat: add Mercantil Tpago PagoMóvil provider for Venezuela

[arts1433]

Summary

Adds zkTLS provider for Mercantil Tpago PagoMóvil payment verification in Venezuela.

Why DOM regex instead of JSON API

The API endpoint apimbu.mercantilbanco.com uses RSA-2048 encryption on both
request body and response — the private key lives inside the compiled Angular JS
bundle. PeerAuth cannot intercept plaintext at this layer.

Solution: intercept the rendered DOM on www30.mercantilbanco.com/account/tpago-detail
after Angular decrypts and renders the transaction table.

Technical details

• shouldReplayRequestInPage: true — captures live rendered HTML
• shouldSkipCloseTab: true — session is tab-bound
• No auth headers needed — session auth is inside the RSA-encrypted body
• All regex patterns verified against real HTML data (April 2026)

Fields extracted

Field	Pattern type	Notes
date	regex	DD/MM/YYYY format
type	regex	deposit / withdrawal from img alt
reference	regex	8-12 digits, unique text-blue class
senderPhone	regex	handles full and masked formats
senderBank	regex	anchored to mat-column-bankName
amount	regex	Venezuelan format (9.281,18)
pagadorCedula	regex	from expanded row

Tested against

Real Mercantil Tpago HTML — April 2026
Angular component: melp-operations-table, id=product-detail-tpago

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2b76c94376

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".