fix(meta-status): add on_behalf_of_business_info fallback for business verification

When the `business` edge on WABA returns nothing (system user token scope or
test WABA restrictions), fall back to `on_behalf_of_business_info` + direct
business node query for verification_status. Covers verified businesses whose
WABA doesn't expose the business edge directly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

apps/api/src/services/organization.ts

@@ -133,10 +133,12 @@ export async function fetchMetaStatus(organizationId: string, forceRefresh = fal
         logger.error({ err, organizationId }, '[META-STATUS] WABA fetch failed');
     }
 
-    // Call 2 — Business verification (optional, may not be available on test WABAs)
+    // Call 2 — Business verification (optional, two attempts with different field paths)
     let businessId: string | undefined;
     let businessName: string | undefined;
     let businessVerified: boolean | undefined;
+
+    // Attempt A: business edge (works on production WABAs with business_management scope)
     try {
         const bizRes = await fetch(
             `https://graph.facebook.com/v19.0/${org.wabaId}?fields=business{id,name,verification_status}`,
@@ -148,8 +150,31 @@ export async function fetchMetaStatus(organizationId: string, forceRefresh = fal
             businessName = bizData.business.name;
             businessVerified = bizData.business.verification_status === 'verified';
         }
-    } catch {
-        // Business field not accessible — non-fatal (e.g. test WABAs)
+    } catch { /* non-fatal */ }
+
+    // Attempt B: on_behalf_of_business_info fallback (broader token compatibility)
+    if (businessId === undefined) {
+        try {
+            const obRes = await fetch(
+                `https://graph.facebook.com/v19.0/${org.wabaId}?fields=on_behalf_of_business_info`,
+                { headers }
+            );
+            const obData = await obRes.json() as any;
+            if (!obData.error && obData.on_behalf_of_business_info?.id) {
+                businessId = obData.on_behalf_of_business_info.id;
+                businessName = obData.on_behalf_of_business_info.name;
+                // Fetch verification status directly from the business node
+                const vRes = await fetch(
+                    `https://graph.facebook.com/v19.0/${businessId}?fields=name,verification_status`,
+                    { headers }
+                );
+                const vData = await vRes.json() as any;
+                if (!vData.error) {
+                    businessVerified = vData.verification_status === 'verified';
+                    if (vData.name) businessName = vData.name;
+                }
+            }
+        } catch { /* non-fatal */ }
     }
 
     const result: MetaStatus = {