feat: system settings, dynamic logos, template numbering, permission consolidation

- System settings page with tabs: Security, System, Firma
- Configurable attendance rules (break thresholds, rounding) from DB
- Configurable document numbering with template patterns ({YYYY}/{PREFIX}/{NNN})
- Dynamic logo upload (light/dark variants) served from DB instead of static files
- Email settings (SMTP from/name, alert/leave emails) configurable in UI
- Currency and VAT rate lists configurable, used across all modules
- Permissions simplified: offers.settings + settings.roles + settings.security → settings.manage
- Leaflet bundled locally, removed unpkg.com from CSP
- Silent catch blocks fixed with proper logging
- console.log replaced with app.log.info in server.ts
- Schema renamed: company-settings.schema → settings.schema
- App info section: version, Node.js, uptime, memory, DB status, NAS status

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/admin/pages/AttendanceLocation.tsx

@@ -5,12 +5,13 @@ import Forbidden from "../components/Forbidden";
 import { useNavigate, useParams, Link } from "react-router-dom";
 import { motion } from "framer-motion";
 
+import L from "leaflet";
+import "leaflet/dist/leaflet.css";
+
 import { formatDate, formatTime } from "../utils/attendanceHelpers";
 import apiFetch from "../utils/api";
 const API_BASE = "/api/admin";
 
-declare const L: any;
-
 interface LocationRecord {
   user_name: string;
   shift_date: string;
@@ -74,23 +75,6 @@ export default function AttendanceLocation() {
 
     if (!hasAnyLocation || !mapRef.current) return;
 
-    const loadLeaflet = async () => {
-      if ((window as unknown as Record<string, unknown>).L) {
-        initMap();
-        return;
-      }
-
-      const link = document.createElement("link");
-      link.rel = "stylesheet";
-      link.href = "https://unpkg.com/leaflet@1.9.4/dist/leaflet.css";
-      document.head.appendChild(link);
-
-      const script = document.createElement("script");
-      script.src = "https://unpkg.com/leaflet@1.9.4/dist/leaflet.js";
-      script.onload = initMap;
-      document.body.appendChild(script);
-    };
-
     const initMap = () => {
       if (mapInstanceRef.current) {
         (mapInstanceRef.current as { remove: () => void }).remove();
@@ -175,7 +159,7 @@ export default function AttendanceLocation() {
       }
     };
 
-    loadLeaflet();
+    initMap();
 
     return () => {
       if (mapInstanceRef.current) {