feat: cashier/counter reports, service-order & remission flows, Rached migration utils

- Add "Mis cortes de caja" report for cashiers/counters with sales detail.
- Cash register history scoped to own cuts for non-admin roles; new /register/<id>/sales endpoint.
- Remove dashboard from cashier menu; add Reports to cashier/counter.
- Service orders: assign mechanic, budget field, invoice flag, counter/cashier can add items/remissions, convert to remission.
- Remission notes module (UI, CSS, courier, counter remissions).
- Customer hard-delete and vehicle/customer linkage in workshop.
- POS: always show search results, compact payment grid, credit validation, tier pricing (5%/10%), ticket with customer/folio.
- Inventory: CSV template with sku_secondary, alias import.
- Rached migration scripts and DB migrations.
- Version-bump cached JS/CSS query strings.

Excludes local Rached session tokens/captures (rached_*.json / rached_*.txt).

pos/middleware.py

@@ -43,8 +43,8 @@ def require_auth(*required_permissions):
             # Check permissions
             if required_permissions:
                 missing = set(required_permissions) - g.permissions
-                # owner role bypasses all permission checks
-                if g.employee_role != 'owner' and missing:
+                # owner/admin roles bypass all permission checks
+                if g.employee_role not in ('owner', 'admin') and missing:
                     return jsonify({'error': f'Missing permissions: {", ".join(missing)}'}), 403
 
             return f(*args, **kwargs)
@@ -54,4 +54,4 @@ def require_auth(*required_permissions):
 
 def has_permission(permission):
     """Check if current user has a specific permission. Use inside a route."""
-    return g.employee_role == 'owner' or permission in g.permissions
+    return g.employee_role in ('owner', 'admin') or permission in g.permissions