feat(loyalty): restructure program CRUD by interface

Move program CRUD from store to merchant/admin interfaces.
Store becomes view-only for program config while merchant gets
full CRUD and admin gets override capabilities.

Merchant portal:
- New API endpoints (GET/POST/PATCH/DELETE /program)
- New settings page with create/edit/delete form
- Overview page now has Create/Edit Program buttons
- Settings menu item added to sidebar

Admin portal:
- New CRUD endpoints (create for merchant, update, delete)
- New activate/deactivate program endpoints
- Programs list has edit and toggle buttons per row
- Merchant detail has create/delete/toggle program actions

Store portal:
- Removed POST/PATCH /program endpoints (now read-only)
- Removed settings page route and template
- Terminal, cards, stats, enroll unchanged

Tests: 112 passed (58 new) covering merchant API, admin CRUD,
store endpoint removal, and program service unit tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/loyalty/routes/api/admin.py

@@ -20,9 +20,11 @@ from app.modules.loyalty.schemas import (
     MerchantSettingsResponse,
     MerchantSettingsUpdate,
     MerchantStatsResponse,
+    ProgramCreate,
     ProgramListResponse,
     ProgramResponse,
     ProgramStatsResponse,
+    ProgramUpdate,
 )
 from app.modules.loyalty.services import program_service
 from app.modules.tenancy.models import User  # API-007
@@ -107,6 +109,93 @@ def get_program_stats(
     return ProgramStatsResponse(**stats)
 
 
+@admin_router.post(
+    "/merchants/{merchant_id}/program", response_model=ProgramResponse, status_code=201
+)
+def create_program_for_merchant(
+    data: ProgramCreate,
+    merchant_id: int = Path(..., gt=0),
+    current_user: User = Depends(get_current_admin_api),
+    db: Session = Depends(get_db),
+):
+    """Create a loyalty program for a merchant (admin override)."""
+    program = program_service.create_program(db, merchant_id, data)
+
+    response = ProgramResponse.model_validate(program)
+    response.is_stamps_enabled = program.is_stamps_enabled
+    response.is_points_enabled = program.is_points_enabled
+    response.display_name = program.display_name
+
+    logger.info(f"Admin created loyalty program for merchant {merchant_id}")
+    return response
+
+
+@admin_router.patch("/programs/{program_id}", response_model=ProgramResponse)
+def update_program(
+    data: ProgramUpdate,
+    program_id: int = Path(..., gt=0),
+    current_user: User = Depends(get_current_admin_api),
+    db: Session = Depends(get_db),
+):
+    """Update a loyalty program (admin override)."""
+    program = program_service.update_program(db, program_id, data)
+
+    response = ProgramResponse.model_validate(program)
+    response.is_stamps_enabled = program.is_stamps_enabled
+    response.is_points_enabled = program.is_points_enabled
+    response.display_name = program.display_name
+
+    logger.info(f"Admin updated loyalty program {program_id}")
+    return response
+
+
+@admin_router.delete("/programs/{program_id}", status_code=204)
+def delete_program(
+    program_id: int = Path(..., gt=0),
+    current_user: User = Depends(get_current_admin_api),
+    db: Session = Depends(get_db),
+):
+    """Delete a loyalty program (admin override)."""
+    program_service.delete_program(db, program_id)
+    logger.info(f"Admin deleted loyalty program {program_id}")
+
+
+@admin_router.post("/programs/{program_id}/activate", response_model=ProgramResponse)
+def activate_program(
+    program_id: int = Path(..., gt=0),
+    current_user: User = Depends(get_current_admin_api),
+    db: Session = Depends(get_db),
+):
+    """Activate a loyalty program."""
+    program = program_service.activate_program(db, program_id)
+
+    response = ProgramResponse.model_validate(program)
+    response.is_stamps_enabled = program.is_stamps_enabled
+    response.is_points_enabled = program.is_points_enabled
+    response.display_name = program.display_name
+
+    logger.info(f"Admin activated loyalty program {program_id}")
+    return response
+
+
+@admin_router.post("/programs/{program_id}/deactivate", response_model=ProgramResponse)
+def deactivate_program(
+    program_id: int = Path(..., gt=0),
+    current_user: User = Depends(get_current_admin_api),
+    db: Session = Depends(get_db),
+):
+    """Deactivate a loyalty program."""
+    program = program_service.deactivate_program(db, program_id)
+
+    response = ProgramResponse.model_validate(program)
+    response.is_stamps_enabled = program.is_stamps_enabled
+    response.is_points_enabled = program.is_points_enabled
+    response.display_name = program.display_name
+
+    logger.info(f"Admin deactivated loyalty program {program_id}")
+    return response
+
+
 # =============================================================================
 # Merchant Management
 # =============================================================================

app/modules/loyalty/routes/api/merchant.py

@@ -0,0 +1,98 @@
+# app/modules/loyalty/routes/api/merchant.py
+"""
+Loyalty module merchant routes.
+
+Merchant portal endpoints for full program CRUD:
+- Get merchant's loyalty program
+- Create a loyalty program
+- Update the loyalty program
+- Delete the loyalty program
+
+Authentication: Authorization header (API-only, no cookies for CSRF safety).
+The user must own at least one active merchant (validated by
+get_merchant_for_current_user).
+
+Auto-discovered by the route system (merchant.py in routes/api/ triggers
+registration under /api/v1/merchants/loyalty/*).
+"""
+
+import logging
+
+from fastapi import APIRouter, Depends
+from sqlalchemy.orm import Session
+
+from app.api.deps import get_merchant_for_current_user
+from app.core.database import get_db
+from app.modules.loyalty.schemas import (
+    ProgramCreate,
+    ProgramResponse,
+    ProgramUpdate,
+)
+from app.modules.loyalty.services import program_service
+from app.modules.tenancy.models import Merchant
+
+logger = logging.getLogger(__name__)
+
+ROUTE_CONFIG = {
+    "prefix": "/loyalty",
+}
+
+router = APIRouter()
+
+
+def _build_program_response(program) -> ProgramResponse:
+    """Build a ProgramResponse from a program ORM object."""
+    response = ProgramResponse.model_validate(program)
+    response.is_stamps_enabled = program.is_stamps_enabled
+    response.is_points_enabled = program.is_points_enabled
+    response.display_name = program.display_name
+    return response
+
+
+# =============================================================================
+# Program CRUD
+# =============================================================================
+
+
+@router.get("/program", response_model=ProgramResponse)
+def get_program(
+    merchant: Merchant = Depends(get_merchant_for_current_user),
+    db: Session = Depends(get_db),
+):
+    """Get the merchant's loyalty program."""
+    program = program_service.require_program_by_merchant(db, merchant.id)
+    return _build_program_response(program)
+
+
+@router.post("/program", response_model=ProgramResponse, status_code=201)
+def create_program(
+    data: ProgramCreate,
+    merchant: Merchant = Depends(get_merchant_for_current_user),
+    db: Session = Depends(get_db),
+):
+    """Create a loyalty program for the merchant."""
+    program = program_service.create_program(db, merchant.id, data)
+    return _build_program_response(program)
+
+
+@router.patch("/program", response_model=ProgramResponse)
+def update_program(
+    data: ProgramUpdate,
+    merchant: Merchant = Depends(get_merchant_for_current_user),
+    db: Session = Depends(get_db),
+):
+    """Update the merchant's loyalty program."""
+    program = program_service.require_program_by_merchant(db, merchant.id)
+    program = program_service.update_program(db, program.id, data)
+    return _build_program_response(program)
+
+
+@router.delete("/program", status_code=204)
+def delete_program(
+    merchant: Merchant = Depends(get_merchant_for_current_user),
+    db: Session = Depends(get_db),
+):
+    """Delete the merchant's loyalty program."""
+    program = program_service.require_program_by_merchant(db, merchant.id)
+    program_service.delete_program(db, program.id)
+    logger.info(f"Merchant {merchant.id} ({merchant.name}) deleted loyalty program")

app/modules/loyalty/routes/api/store.py

@@ -40,10 +40,8 @@ from app.modules.loyalty.schemas import (
     PointsRedeemResponse,
     PointsVoidRequest,
     PointsVoidResponse,
-    ProgramCreate,
     ProgramResponse,
     ProgramStatsResponse,
-    ProgramUpdate,
     StampRedeemRequest,
     StampRedeemResponse,
     StampRequest,
@@ -106,46 +104,6 @@ def get_program(
     return response
 
 
-@store_router.post("/program", response_model=ProgramResponse, status_code=201)
-def create_program(
-    data: ProgramCreate,
-    current_user: User = Depends(get_current_store_api),
-    db: Session = Depends(get_db),
-):
-    """Create a loyalty program for the merchant."""
-    store_id = current_user.token_store_id
-    merchant_id = get_store_merchant_id(db, store_id)
-
-    program = program_service.create_program(db, merchant_id, data)
-
-    response = ProgramResponse.model_validate(program)
-    response.is_stamps_enabled = program.is_stamps_enabled
-    response.is_points_enabled = program.is_points_enabled
-    response.display_name = program.display_name
-
-    return response
-
-
-@store_router.patch("/program", response_model=ProgramResponse)
-def update_program(
-    data: ProgramUpdate,
-    current_user: User = Depends(get_current_store_api),
-    db: Session = Depends(get_db),
-):
-    """Update the merchant's loyalty program."""
-    store_id = current_user.token_store_id
-
-    program = program_service.require_program_by_store(db, store_id)
-    program = program_service.update_program(db, program.id, data)
-
-    response = ProgramResponse.model_validate(program)
-    response.is_stamps_enabled = program.is_stamps_enabled
-    response.is_points_enabled = program.is_points_enabled
-    response.display_name = program.display_name
-
-    return response
-
-
 @store_router.get("/stats", response_model=ProgramStatsResponse)
 def get_stats(
     current_user: User = Depends(get_current_store_api),