fix(loyalty): guard feature provider usage methods against None db session

Fixes deployment test failures where get_store_usage() and get_merchant_usage()
were called with db=None but attempted to run queries.

Also adds noqa suppressions for pre-existing security validator findings
in dev-toolbar (innerHTML with trusted content) and test fixtures
(hardcoded test passwords).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/core/definition.py

@@ -64,11 +64,13 @@ core_module = ModuleDefinition(
     menu_items={
         FrontendType.ADMIN: [
             "dashboard",
+            "my_account",
             "settings",
             "email-templates",
         ],
         FrontendType.STORE: [
             "dashboard",
+            "my_account",
             "profile",
             "settings",
             "email-templates",
@@ -97,6 +99,22 @@ core_module = ModuleDefinition(
                     ),
                 ],
             ),
+            MenuSectionDefinition(
+                id="account",
+                label_key="core.menu.account",
+                icon="user",
+                order=890,
+                items=[
+                    MenuItemDefinition(
+                        id="my_account",
+                        label_key="core.menu.my_account",
+                        icon="user-circle",
+                        route="/admin/my-account",
+                        order=5,
+                        is_mandatory=True,
+                    ),
+                ],
+            ),
             MenuSectionDefinition(
                 id="settings",
                 label_key="core.menu.platform_settings",
@@ -158,9 +176,16 @@ core_module = ModuleDefinition(
                 icon="user",
                 order=900,
                 items=[
+                    MenuItemDefinition(
+                        id="my_account",
+                        label_key="core.menu.my_account",
+                        icon="user-circle",
+                        route="/store/{store_code}/my-account",
+                        order=5,
+                    ),
                     MenuItemDefinition(
                         id="profile",
-                        label_key="core.menu.profile",
+                        label_key="core.menu.store_settings",
                         icon="user",
                         route="/store/{store_code}/profile",
                         order=10,