ICTWorld Payment System v0.11.6 - update notes

This package is based on the uploaded android-universal (2).zip.

Changes:
- Added regression tests for the supplied Nagad `Money Received` SMS format.
- Tested strict SMS-origin labels: bKash (case-insensitive) and NAGAD (case-insensitive).
- Added rejection tests for generic/numeric/near-match sender IDs and sent-SMS text.
- Updated UNIVERSAL-SMS-CHANGELOG-BN.md.

Validation performed in this environment:
- PHP parser test suite: 25 assertions passed.
- PHP syntax check: all PHP source files passed.
- Live cPanel/database/real device end-to-end test was NOT performed.

IMPORTANT DEPLOYMENT:
- Do not overwrite the live private/config.php. This ZIP intentionally excludes it.
- Preserve your existing private/qr-assets/ directory and uploaded QR images; this ZIP intentionally excludes them.
- Back up code and database first. Deploy to staging, not directly to production.
- Keep sms_auto_verify disabled until end-to-end payment reconciliation has been verified.
- Sender ID validation uses the actual SMS originating address, not the sender phone number printed inside the SMS body.
- SMS parsing is evidence only, not authenticated confirmation from the payment provider.