Return a cursor page of movements for one wallet. Offset pagination is exposed as an opaque cursor. Filters accept type, status, from / to, and bookingCode. from and to are UTC instants; a value that is not a date-time is 422 before any provider call. Unknown type / status / source values are returned as other and logged. A movement the provider returns in an unusable shape is skipped and logged. wallet_id is the Mercury UUID from GET /v1/wallets. A refused capability or entitlement read is 403. A provider 403 or 404 on the movement read is 404.