feat(loyalty): cross-persona page alignment with shared components

Align loyalty pages across admin, merchant, and store personas so each
sees the same page set scoped to their access level. Admin acts as a
superset of merchant with "on behalf" capabilities.

New pages:
- Store: Staff PINs management (CRUD)
- Merchant: Cards, Card Detail, Transactions, Staff PINs (CRUD), Settings (read-only)
- Admin: Merchant Cards, Card Detail, Transactions, PINs (read-only)

Architecture:
- 4 shared Jinja2 partials (cards-list, card-detail, transactions, pins)
- 4 shared JS factory modules parameterized by apiPrefix/scope
- Persona templates are thin wrappers including shared partials
- PinDetailResponse schema for cross-store PIN listings

API: 17 new endpoints (11 merchant, 6 admin on-behalf)
Tests: 38 new integration tests, arch-check green
i18n: ~130 new keys across en/fr/de/lb
Docs: pages-and-navigation.md with full page matrix

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

app/modules/loyalty/routes/pages/merchant.py

@@ -157,3 +157,125 @@ async def merchant_loyalty_analytics(
         "loyalty/merchant/analytics.html",
         context,
     )
+
+
+# ============================================================================
+# LOYALTY CARDS
+# ============================================================================
+
+
+@router.get("/cards", response_class=HTMLResponse, include_in_schema=False)
+async def merchant_loyalty_cards(
+    request: Request,
+    current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
+    merchant: Merchant = Depends(get_merchant_for_current_user_page),
+    db: Session = Depends(get_db),
+):
+    """Render merchant loyalty cards list page."""
+    context = _get_merchant_context(
+        request,
+        db,
+        current_user,
+        merchant_id=merchant.id,
+    )
+    return templates.TemplateResponse(
+        "loyalty/merchant/cards.html",
+        context,
+    )
+
+
+@router.get("/cards/{card_id}", response_class=HTMLResponse, include_in_schema=False)
+async def merchant_loyalty_card_detail(
+    request: Request,
+    card_id: int,
+    current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
+    merchant: Merchant = Depends(get_merchant_for_current_user_page),
+    db: Session = Depends(get_db),
+):
+    """Render merchant loyalty card detail page."""
+    context = _get_merchant_context(
+        request,
+        db,
+        current_user,
+        merchant_id=merchant.id,
+        card_id=card_id,
+    )
+    return templates.TemplateResponse(
+        "loyalty/merchant/card-detail.html",
+        context,
+    )
+
+
+# ============================================================================
+# LOYALTY TRANSACTIONS
+# ============================================================================
+
+
+@router.get("/transactions", response_class=HTMLResponse, include_in_schema=False)
+async def merchant_loyalty_transactions(
+    request: Request,
+    current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
+    merchant: Merchant = Depends(get_merchant_for_current_user_page),
+    db: Session = Depends(get_db),
+):
+    """Render merchant loyalty transactions page."""
+    context = _get_merchant_context(
+        request,
+        db,
+        current_user,
+        merchant_id=merchant.id,
+    )
+    return templates.TemplateResponse(
+        "loyalty/merchant/transactions.html",
+        context,
+    )
+
+
+# ============================================================================
+# LOYALTY STAFF PINS
+# ============================================================================
+
+
+@router.get("/pins", response_class=HTMLResponse, include_in_schema=False)
+async def merchant_loyalty_pins(
+    request: Request,
+    current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
+    merchant: Merchant = Depends(get_merchant_for_current_user_page),
+    db: Session = Depends(get_db),
+):
+    """Render merchant loyalty staff PINs page."""
+    context = _get_merchant_context(
+        request,
+        db,
+        current_user,
+        merchant_id=merchant.id,
+    )
+    return templates.TemplateResponse(
+        "loyalty/merchant/pins.html",
+        context,
+    )
+
+
+# ============================================================================
+# LOYALTY SETTINGS
+# ============================================================================
+
+
+@router.get("/settings", response_class=HTMLResponse, include_in_schema=False)
+async def merchant_loyalty_settings(
+    request: Request,
+    current_user: UserContext = Depends(get_current_merchant_from_cookie_or_header),
+    merchant: Merchant = Depends(get_merchant_for_current_user_page),
+    db: Session = Depends(get_db),
+):
+    """Render merchant loyalty settings page (read-only)."""
+    context = _get_merchant_context(
+        request,
+        db,
+        current_user,
+        merchant_id=merchant.id,
+    )
+    return templates.TemplateResponse(
+        "loyalty/merchant/settings.html",
+        context,
+    )