feat(loyalty): restructure program CRUD by interface

Move program CRUD from store to merchant/admin interfaces.
Store becomes view-only for program config while merchant gets
full CRUD and admin gets override capabilities.

Merchant portal:
- New API endpoints (GET/POST/PATCH/DELETE /program)
- New settings page with create/edit/delete form
- Overview page now has Create/Edit Program buttons
- Settings menu item added to sidebar

Admin portal:
- New CRUD endpoints (create for merchant, update, delete)
- New activate/deactivate program endpoints
- Programs list has edit and toggle buttons per row
- Merchant detail has create/delete/toggle program actions

Store portal:
- Removed POST/PATCH /program endpoints (now read-only)
- Removed settings page route and template
- Terminal, cards, stats, enroll unchanged

Tests: 112 passed (58 new) covering merchant API, admin CRUD,
store endpoint removal, and program service unit tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/loyalty/routes/api/store.py

@@ -40,10 +40,8 @@ from app.modules.loyalty.schemas import (
     PointsRedeemResponse,
     PointsVoidRequest,
     PointsVoidResponse,
-    ProgramCreate,
     ProgramResponse,
     ProgramStatsResponse,
-    ProgramUpdate,
     StampRedeemRequest,
     StampRedeemResponse,
     StampRequest,
@@ -106,46 +104,6 @@ def get_program(
     return response
 
 
-@store_router.post("/program", response_model=ProgramResponse, status_code=201)
-def create_program(
-    data: ProgramCreate,
-    current_user: User = Depends(get_current_store_api),
-    db: Session = Depends(get_db),
-):
-    """Create a loyalty program for the merchant."""
-    store_id = current_user.token_store_id
-    merchant_id = get_store_merchant_id(db, store_id)
-
-    program = program_service.create_program(db, merchant_id, data)
-
-    response = ProgramResponse.model_validate(program)
-    response.is_stamps_enabled = program.is_stamps_enabled
-    response.is_points_enabled = program.is_points_enabled
-    response.display_name = program.display_name
-
-    return response
-
-
-@store_router.patch("/program", response_model=ProgramResponse)
-def update_program(
-    data: ProgramUpdate,
-    current_user: User = Depends(get_current_store_api),
-    db: Session = Depends(get_db),
-):
-    """Update the merchant's loyalty program."""
-    store_id = current_user.token_store_id
-
-    program = program_service.require_program_by_store(db, store_id)
-    program = program_service.update_program(db, program.id, data)
-
-    response = ProgramResponse.model_validate(program)
-    response.is_stamps_enabled = program.is_stamps_enabled
-    response.is_points_enabled = program.is_points_enabled
-    response.display_name = program.display_name
-
-    return response
-
-
 @store_router.get("/stats", response_model=ProgramStatsResponse)
 def get_stats(
     current_user: User = Depends(get_current_store_api),