feat: add customer profile, VAT alignment, and fix shop auth

Customer Profile:
- Add profile API (GET/PUT /api/v1/shop/profile)
- Add password change endpoint (PUT /api/v1/shop/profile/password)
- Implement full profile page with preferences and password sections
- Add CustomerPasswordChange schema

Shop Authentication Fixes:
- Add Authorization header to all shop account API calls
- Fix orders, order-detail, messages pages authentication
- Add proper redirect to login on 401 responses
- Fix toast message showing noqa comment in shop-layout.js

VAT Calculation:
- Add shared VAT utility (app/utils/vat.py)
- Add VAT fields to Order model (vat_regime, vat_rate, etc.)
- Align order VAT calculation with invoice settings
- Add migration for VAT fields on orders

Validation Framework:
- Fix base_validator.py with missing methods
- Add validate_file, output_results, get_exit_code methods
- Fix validate_all.py import issues

Documentation:
- Add launch-readiness.md tracking OMS status
- Update to 95% feature complete

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

models/database/order.py

@@ -23,6 +23,7 @@ from sqlalchemy import (
     ForeignKey,
     Index,
     Integer,
+    Numeric,
     String,
     Text,
 )
@@ -89,6 +90,16 @@ class Order(Base, TimestampMixin):
     total_amount_cents = Column(Integer, nullable=False)
     currency = Column(String(10), default="EUR")
 
+    # === VAT Information ===
+    # VAT regime: domestic, oss, reverse_charge, origin, exempt
+    vat_regime = Column(String(20), nullable=True)
+    # VAT rate as percentage (e.g., 17.00 for 17%)
+    vat_rate = Column(Numeric(5, 2), nullable=True)
+    # Human-readable VAT label (e.g., "Luxembourg VAT 17%")
+    vat_rate_label = Column(String(100), nullable=True)
+    # Destination country for cross-border sales (ISO code)
+    vat_destination_country = Column(String(2), nullable=True)
+
     # === Customer Snapshot (preserved at order time) ===
     customer_first_name = Column(String(100), nullable=False)
     customer_last_name = Column(String(100), nullable=False)

models/schema/customer.py

@@ -66,6 +66,28 @@ class CustomerUpdate(BaseModel):
         return v.lower() if v else None
 
 
+class CustomerPasswordChange(BaseModel):
+    """Schema for customer password change."""
+
+    current_password: str = Field(..., description="Current password")
+    new_password: str = Field(
+        ..., min_length=8, description="New password (minimum 8 characters)"
+    )
+    confirm_password: str = Field(..., description="Confirm new password")
+
+    @field_validator("new_password")
+    @classmethod
+    def password_strength(cls, v: str) -> str:
+        """Validate password strength."""
+        if len(v) < 8:
+            raise ValueError("Password must be at least 8 characters")
+        if not any(char.isdigit() for char in v):
+            raise ValueError("Password must contain at least one digit")
+        if not any(char.isalpha() for char in v):
+            raise ValueError("Password must contain at least one letter")
+        return v
+
+
 # ============================================================================
 # Customer Response
 # ============================================================================

models/schema/order.py

@@ -239,6 +239,12 @@ class OrderResponse(BaseModel):
     total_amount: float
     currency: str
 
+    # VAT information
+    vat_regime: str | None = None
+    vat_rate: float | None = None
+    vat_rate_label: str | None = None
+    vat_destination_country: str | None = None
+
     # Customer snapshot
     customer_first_name: str
     customer_last_name: str
@@ -400,6 +406,12 @@ class AdminOrderItem(BaseModel):
     total_amount: float
     currency: str
 
+    # VAT information
+    vat_regime: str | None = None
+    vat_rate: float | None = None
+    vat_rate_label: str | None = None
+    vat_destination_country: str | None = None
+
     # Shipping
     ship_country_iso: str
     tracking_number: str | None