feat: add customer profile, VAT alignment, and fix shop auth

Customer Profile:
- Add profile API (GET/PUT /api/v1/shop/profile)
- Add password change endpoint (PUT /api/v1/shop/profile/password)
- Implement full profile page with preferences and password sections
- Add CustomerPasswordChange schema

Shop Authentication Fixes:
- Add Authorization header to all shop account API calls
- Fix orders, order-detail, messages pages authentication
- Add proper redirect to login on 401 responses
- Fix toast message showing noqa comment in shop-layout.js

VAT Calculation:
- Add shared VAT utility (app/utils/vat.py)
- Add VAT fields to Order model (vat_regime, vat_rate, etc.)
- Align order VAT calculation with invoice settings
- Add migration for VAT fields on orders

Validation Framework:
- Fix base_validator.py with missing methods
- Add validate_file, output_results, get_exit_code methods
- Fix validate_all.py import issues

Documentation:
- Add launch-readiness.md tracking OMS status
- Update to 95% feature complete

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/templates/shop/account/orders.html

@@ -173,10 +173,26 @@ function shopOrdersPage() {
             this.error = '';
 
             try {
+                const token = localStorage.getItem('customer_token');
+                if (!token) {
+                    window.location.href = '{{ base_url }}shop/account/login?next=' + encodeURIComponent(window.location.pathname);
+                    return;
+                }
+
                 const skip = (page - 1) * this.perPage;
-                const response = await fetch(`/api/v1/shop/orders?skip=${skip}&limit=${this.perPage}`);
+                const response = await fetch(`/api/v1/shop/orders?skip=${skip}&limit=${this.perPage}`, {
+                    headers: {
+                        'Authorization': `Bearer ${token}`
+                    }
+                });
 
                 if (!response.ok) {
+                    if (response.status === 401) {
+                        localStorage.removeItem('customer_token');
+                        localStorage.removeItem('customer_user');
+                        window.location.href = '{{ base_url }}shop/account/login?next=' + encodeURIComponent(window.location.pathname);
+                        return;
+                    }
                     throw new Error('Failed to load orders');
                 }