feat(loyalty): restructure program CRUD by interface

Move program CRUD from store to merchant/admin interfaces.
Store becomes view-only for program config while merchant gets
full CRUD and admin gets override capabilities.

Merchant portal:
- New API endpoints (GET/POST/PATCH/DELETE /program)
- New settings page with create/edit/delete form
- Overview page now has Create/Edit Program buttons
- Settings menu item added to sidebar

Admin portal:
- New CRUD endpoints (create for merchant, update, delete)
- New activate/deactivate program endpoints
- Programs list has edit and toggle buttons per row
- Merchant detail has create/delete/toggle program actions

Store portal:
- Removed POST/PATCH /program endpoints (now read-only)
- Removed settings page route and template
- Terminal, cards, stats, enroll unchanged

Tests: 112 passed (58 new) covering merchant API, admin CRUD,
store endpoint removal, and program service unit tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/loyalty/static/admin/js/loyalty-programs.js

@@ -232,6 +232,20 @@ function adminLoyaltyPrograms() {
             }
         },
 
+        // Toggle program active/inactive
+        async toggleProgramActive(program) {
+            const action = program.is_active ? 'deactivate' : 'activate';
+            try {
+                const response = await apiClient.post(`/admin/loyalty/programs/${program.id}/${action}`);
+                program.is_active = response.is_active;
+                Utils.showToast(`Program ${action}d successfully`, 'success');
+                loyaltyProgramsLog.info(`Program ${program.id} ${action}d`);
+            } catch (error) {
+                Utils.showToast(`Failed to ${action} program: ${error.message}`, 'error');
+                loyaltyProgramsLog.error(`Failed to ${action} program:`, error);
+            }
+        },
+
         // Format date for display
         formatDate(dateString) {
             if (!dateString) return 'N/A';