feat: system settings, dynamic logos, template numbering, permission consolidation

- System settings page with tabs: Security, System, Firma
- Configurable attendance rules (break thresholds, rounding) from DB
- Configurable document numbering with template patterns ({YYYY}/{PREFIX}/{NNN})
- Dynamic logo upload (light/dark variants) served from DB instead of static files
- Email settings (SMTP from/name, alert/leave emails) configurable in UI
- Currency and VAT rate lists configurable, used across all modules
- Permissions simplified: offers.settings + settings.roles + settings.security → settings.manage
- Leaflet bundled locally, removed unpkg.com from CSP
- Silent catch blocks fixed with proper logging
- console.log replaced with app.log.info in server.ts
- Schema renamed: company-settings.schema → settings.schema
- App info section: version, Node.js, uptime, memory, DB status, NAS status

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/admin/components/Sidebar.tsx

@@ -330,22 +330,6 @@ const menuSections: MenuSection[] = [
           </svg>
         ),
       },
-      {
-        path: "/company/settings",
-        label: "Firma",
-        permission: "offers.settings",
-        icon: (
-          <svg
-            viewBox="0 0 24 24"
-            fill="none"
-            stroke="currentColor"
-            strokeWidth="2"
-          >
-            <path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" />
-            <polyline points="9 22 9 12 15 12 15 22" />
-          </svg>
-        ),
-      },
     ],
   },
   {
@@ -372,7 +356,7 @@ const menuSections: MenuSection[] = [
       {
         path: "/settings",
         label: "Nastavení",
-        permission: ["settings.roles", "settings.security"],
+        permission: "settings.manage",
         icon: (
           <svg
             viewBox="0 0 24 24"
@@ -464,11 +448,17 @@ export default function Sidebar({ isOpen, onClose, onLogout }: SidebarProps) {
           <img
             src={
               theme === "dark"
-                ? "/images/logo-dark.png"
-                : "/images/logo-light.png"
+                ? "/api/admin/company-settings/logo?variant=dark"
+                : "/api/admin/company-settings/logo?variant=light"
             }
             alt="Logo"
             className="admin-sidebar-logo"
+            onError={(e) => {
+              (e.target as HTMLImageElement).src =
+                theme === "dark"
+                  ? "/images/logo-dark.png"
+                  : "/images/logo-light.png";
+            }}
           />
           <button
             onClick={onClose}