In case of foreign payment using a bank account in another currency, banks can reflect the foreign currency exchange fee on another bank account belonging to the company and in its main currency.
Fr example: in a EUR company having in the same bank (e.g ING) both an USD and a EUR account, making a payment using the USD bank account gets you effectively 2 bank transactions while you initiated only one:
 - the payment in the USD account and
 - the currency diff fee in the EUR account.
In this particular use case, the communication on the currency diff fee reflects the one from the payment and, depending on the reconciliation order, that currency diff could be taken as a partial payment
because we were matching on the words in payment_ref regardless of the currency used, while it shouldn't and must be processed as a bank fee.

The outstanging payments are now only matched when the account.payment memo and the statement line payment_ref exactly match, and if the journal is the same. The algorithm for invoices matching doesn't change except we explictly remove the outstanding accounts from the list of reconcilable accounts to search on.

Previously, a match between an invoice ref and a transaction payment_ref could occure even if the matching word wasn't complete.
E.g: invoice ref: INV/2025/01/10
     transaction payment_ref: INV/2025/01/100
To be sure this isn't the case anymore, we check that the matching words are properly surrounded by a "finishing character".

task-5023163

Forward-Port-Of: odoo/enterprise#93016
Forward-Port-Of: odoo/enterprise#92950

Steps to reproduce
==================

- In debug mode
- Go to Contacts
- Open any record
- Open studio
- Click on any field
- Add the "Extra rights / Technical Features" group to "Allow visibility to groups"

=> The group is not displayed as a tag

- Restore the view
- Now without debug mode (?debug=0), repeat the same steps

=> The field disappears, we need to toggle "Show Invisible Elements" to see it again

Cause of the issue
==================

https://github.com/odoo/odoo/pull/179354/commits/15aeaf88c268f047b8b83a5aa66f5da246c2b675

When calling get_views, the "base.group_no_one" is removed from the groups attribute and "invisible" is set to true if we are in debug mode.

Solution
========

Adding "base.group_no_one" is still the way to have the expected behavior for now. We override some ir.ui.view functions when in studio to be able to edit it.

According to the docstring of _postprocess_debug_to_cache, this feature is temporary. Another solution will be needed in the future.

opw-4969262

Forward-Port-Of: odoo/enterprise#93435
Forward-Port-Of: odoo/enterprise#91647

Currently an error occurs when signing an encrypted file with empty password.

**Steps to replicate**
* Install `Sign`
* Sign> Upload a pdf > Add following [pdf](https://drive.google.com/file/d/1M0_VzWLzv-lSZ-IlI9Zmx-M7jFGvtJJj/view?usp=sharing)>  Sign the document using `Sign now`
* Validate and send completed document

`AttributeError: 'NoneType' object has no attribute 'seek'`

**Cause:**
This occurs because [1] returns `None` to the variable `output` at [2] which in turn passes the `None` value to [3] causing the error.

Error occurs in python 3.12+, because it does not throw an exception in `_check_pdf_data_validity`.

**Solution:**
* Add a validation to prevent upload of unsupported files.

[1]: https://github.com/odoo/enterprise/blob/e7861f1ddef2fb9628eebca93942e64c73cc95fc/sign/models/sign_document.py#L242-L243
[2]: https://github.com/odoo/enterprise/blob/e7861f1ddef2fb9628eebca93942e64c73cc95fc/sign/models/sign_completed_document.py#L33-L34
[3]: https://github.com/odoo/odoo/blob/033c7a63bdf3d10d9d2c5084959fd34f52011bea/odoo/tools/pdf/signature.py#L51

**Sentry-6784800544,6802557168**

Forward-Port-Of: odoo/enterprise#91766