feat: system settings, dynamic logos, template numbering, permission consolidation

- System settings page with tabs: Security, System, Firma
- Configurable attendance rules (break thresholds, rounding) from DB
- Configurable document numbering with template patterns ({YYYY}/{PREFIX}/{NNN})
- Dynamic logo upload (light/dark variants) served from DB instead of static files
- Email settings (SMTP from/name, alert/leave emails) configurable in UI
- Currency and VAT rate lists configurable, used across all modules
- Permissions simplified: offers.settings + settings.roles + settings.security → settings.manage
- Leaflet bundled locally, removed unpkg.com from CSP
- Silent catch blocks fixed with proper logging
- console.log replaced with app.log.info in server.ts
- Schema renamed: company-settings.schema → settings.schema
- App info section: version, Node.js, uptime, memory, DB status, NAS status

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/admin/pages/AttendanceHistory.tsx

@@ -126,6 +126,7 @@ export default function AttendanceHistory() {
   const alert = useAlert();
   const { user, hasPermission } = useAuth();
   const [loading, setLoading] = useState(true);
+  const [companyName, setCompanyName] = useState("");
   const printRef = useRef<HTMLDivElement>(null);
   const [month, setMonth] = useState(() => {
     const now = new Date();
@@ -156,6 +157,15 @@ export default function AttendanceHistory() {
     fetchData();
   }, [fetchData]);
 
+  useEffect(() => {
+    apiFetch(`${API_BASE}/company-settings`)
+      .then((r) => r.json())
+      .then((d) => {
+        if (d.success) setCompanyName(d.data.company_name || "");
+      })
+      .catch(() => {});
+  }, []);
+
   const computed = useMemo(() => {
     const [yearStr, monthStr] = month.split("-");
     const monthIndex = parseInt(monthStr, 10) - 1;
@@ -637,13 +647,13 @@ export default function AttendanceHistory() {
                   <div className="print-header">
                     <div className="print-header-left">
                       <img
-                        src="/images/logo-light.png"
-                        alt="BOHA"
+                        src="/api/admin/company-settings/logo?variant=light"
+                        alt=""
                         className="print-logo"
                       />
                       <div className="print-header-text">
                         <h1>EVIDENCE DOCHÁZKY</h1>
-                        <div className="company">BOHA Automation s.r.o.</div>
+                        <div className="company">{companyName}</div>
                       </div>
                     </div>
                     <div className="print-header-right">