feat(loyalty): implement complete loyalty module MVP

Add stamp-based and points-based loyalty programs for vendors with:

Database Models (5 tables):
- loyalty_programs: Vendor program configuration
- loyalty_cards: Customer cards with stamp/point balances
- loyalty_transactions: Immutable audit log
- staff_pins: Fraud prevention PINs (bcrypt hashed)
- apple_device_registrations: Apple Wallet push tokens

Services:
- program_service: Program CRUD and statistics
- card_service: Customer enrollment and card lookup
- stamp_service: Stamp operations with anti-fraud checks
- points_service: Points earning and redemption
- pin_service: Staff PIN management with lockout
- wallet_service: Unified wallet abstraction
- google_wallet_service: Google Wallet API integration
- apple_wallet_service: Apple Wallet .pkpass generation

API Routes:
- Admin: /api/v1/admin/loyalty/* (programs list, stats)
- Vendor: /api/v1/vendor/loyalty/* (stamp, points, cards, PINs)
- Public: /api/v1/loyalty/* (enrollment, Apple Web Service)

Anti-Fraud Features:
- Staff PIN verification (configurable per program)
- Cooldown period between stamps (default 15 min)
- Daily stamp limits (default 5/day)
- PIN lockout after failed attempts

Wallet Integration:
- Google Wallet: LoyaltyClass and LoyaltyObject management
- Apple Wallet: .pkpass generation with PKCS#7 signing
- Apple Web Service endpoints for device registration/updates

Also includes:
- Alembic migration for all tables with indexes
- Localization files (en, fr, de, lu)
- Module documentation
- Phase 2 interface and user journey plan

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/modules/loyalty/locales/de.json

@@ -0,0 +1,72 @@
+{
+  "loyalty": {
+    "module": {
+      "name": "Treueprogramme",
+      "description": "Stempel- und punktebasierte Treueprogramme mit Wallet-Integration"
+    },
+    "program": {
+      "title": "Treueprogramm",
+      "create": "Programm erstellen",
+      "edit": "Programm bearbeiten",
+      "activate": "Aktivieren",
+      "deactivate": "Deaktivieren",
+      "type": {
+        "stamps": "Stempel",
+        "points": "Punkte",
+        "hybrid": "Hybrid"
+      }
+    },
+    "card": {
+      "title": "Treuekarte",
+      "number": "Kartennummer",
+      "qr_code": "QR-Code",
+      "enroll": "Kunde anmelden",
+      "deactivate": "Karte deaktivieren"
+    },
+    "stamp": {
+      "title": "Stempel",
+      "add": "Stempel hinzufügen",
+      "redeem": "Prämie einlösen",
+      "count": "{current} von {target}",
+      "until_reward": "Noch {count} bis zur Prämie"
+    },
+    "points": {
+      "title": "Punkte",
+      "earn": "Punkte sammeln",
+      "redeem": "Punkte einlösen",
+      "balance": "{count} Punkte",
+      "per_euro": "{points} Punkte pro Euro"
+    },
+    "pin": {
+      "title": "Mitarbeiter-PINs",
+      "create": "PIN erstellen",
+      "edit": "PIN bearbeiten",
+      "unlock": "PIN entsperren",
+      "locked": "PIN gesperrt bis {time}"
+    },
+    "wallet": {
+      "google": "Zu Google Wallet hinzufügen",
+      "apple": "Zu Apple Wallet hinzufügen"
+    },
+    "stats": {
+      "title": "Statistiken",
+      "total_cards": "Karten insgesamt",
+      "active_cards": "Aktive Karten",
+      "stamps_issued": "Ausgegebene Stempel",
+      "rewards_redeemed": "Eingelöste Prämien"
+    },
+    "errors": {
+      "program_not_found": "Treueprogramm nicht gefunden",
+      "program_inactive": "Treueprogramm ist nicht aktiv",
+      "card_not_found": "Treuekarte nicht gefunden",
+      "card_inactive": "Treuekarte ist nicht aktiv",
+      "cooldown": "Bitte warten Sie {minutes} Minuten vor dem nächsten Stempel",
+      "daily_limit": "Tageslimit von {limit} Stempeln erreicht",
+      "insufficient_stamps": "Benötigt {required} Stempel, vorhanden {current}",
+      "insufficient_points": "Benötigt {required} Punkte, vorhanden {current}",
+      "pin_required": "Mitarbeiter-PIN erforderlich",
+      "pin_invalid": "Ungültiger PIN",
+      "pin_locked": "PIN wegen zu vieler Fehlversuche gesperrt"
+    }
+  }
+}

app/modules/loyalty/locales/en.json

@@ -0,0 +1,72 @@
+{
+  "loyalty": {
+    "module": {
+      "name": "Loyalty Programs",
+      "description": "Stamp-based and points-based loyalty programs with wallet integration"
+    },
+    "program": {
+      "title": "Loyalty Program",
+      "create": "Create Program",
+      "edit": "Edit Program",
+      "activate": "Activate",
+      "deactivate": "Deactivate",
+      "type": {
+        "stamps": "Stamps",
+        "points": "Points",
+        "hybrid": "Hybrid"
+      }
+    },
+    "card": {
+      "title": "Loyalty Card",
+      "number": "Card Number",
+      "qr_code": "QR Code",
+      "enroll": "Enroll Customer",
+      "deactivate": "Deactivate Card"
+    },
+    "stamp": {
+      "title": "Stamps",
+      "add": "Add Stamp",
+      "redeem": "Redeem Reward",
+      "count": "{current} of {target}",
+      "until_reward": "{count} until reward"
+    },
+    "points": {
+      "title": "Points",
+      "earn": "Earn Points",
+      "redeem": "Redeem Points",
+      "balance": "{count} points",
+      "per_euro": "{points} points per euro"
+    },
+    "pin": {
+      "title": "Staff PINs",
+      "create": "Create PIN",
+      "edit": "Edit PIN",
+      "unlock": "Unlock PIN",
+      "locked": "PIN locked until {time}"
+    },
+    "wallet": {
+      "google": "Add to Google Wallet",
+      "apple": "Add to Apple Wallet"
+    },
+    "stats": {
+      "title": "Statistics",
+      "total_cards": "Total Cards",
+      "active_cards": "Active Cards",
+      "stamps_issued": "Stamps Issued",
+      "rewards_redeemed": "Rewards Redeemed"
+    },
+    "errors": {
+      "program_not_found": "Loyalty program not found",
+      "program_inactive": "Loyalty program is not active",
+      "card_not_found": "Loyalty card not found",
+      "card_inactive": "Loyalty card is not active",
+      "cooldown": "Please wait {minutes} minutes before next stamp",
+      "daily_limit": "Daily stamp limit of {limit} reached",
+      "insufficient_stamps": "Need {required} stamps, have {current}",
+      "insufficient_points": "Need {required} points, have {current}",
+      "pin_required": "Staff PIN is required",
+      "pin_invalid": "Invalid staff PIN",
+      "pin_locked": "PIN locked due to too many failed attempts"
+    }
+  }
+}

app/modules/loyalty/locales/fr.json

@@ -0,0 +1,72 @@
+{
+  "loyalty": {
+    "module": {
+      "name": "Programmes de Fidélité",
+      "description": "Programmes de fidélité par tampons et points avec intégration wallet"
+    },
+    "program": {
+      "title": "Programme de Fidélité",
+      "create": "Créer un Programme",
+      "edit": "Modifier le Programme",
+      "activate": "Activer",
+      "deactivate": "Désactiver",
+      "type": {
+        "stamps": "Tampons",
+        "points": "Points",
+        "hybrid": "Hybride"
+      }
+    },
+    "card": {
+      "title": "Carte de Fidélité",
+      "number": "Numéro de Carte",
+      "qr_code": "Code QR",
+      "enroll": "Inscrire un Client",
+      "deactivate": "Désactiver la Carte"
+    },
+    "stamp": {
+      "title": "Tampons",
+      "add": "Ajouter un Tampon",
+      "redeem": "Échanger la Récompense",
+      "count": "{current} sur {target}",
+      "until_reward": "Plus que {count} pour la récompense"
+    },
+    "points": {
+      "title": "Points",
+      "earn": "Gagner des Points",
+      "redeem": "Échanger des Points",
+      "balance": "{count} points",
+      "per_euro": "{points} points par euro"
+    },
+    "pin": {
+      "title": "Codes PIN du Personnel",
+      "create": "Créer un PIN",
+      "edit": "Modifier le PIN",
+      "unlock": "Débloquer le PIN",
+      "locked": "PIN bloqué jusqu'à {time}"
+    },
+    "wallet": {
+      "google": "Ajouter à Google Wallet",
+      "apple": "Ajouter à Apple Wallet"
+    },
+    "stats": {
+      "title": "Statistiques",
+      "total_cards": "Total des Cartes",
+      "active_cards": "Cartes Actives",
+      "stamps_issued": "Tampons Émis",
+      "rewards_redeemed": "Récompenses Échangées"
+    },
+    "errors": {
+      "program_not_found": "Programme de fidélité introuvable",
+      "program_inactive": "Le programme de fidélité n'est pas actif",
+      "card_not_found": "Carte de fidélité introuvable",
+      "card_inactive": "La carte de fidélité n'est pas active",
+      "cooldown": "Veuillez attendre {minutes} minutes avant le prochain tampon",
+      "daily_limit": "Limite quotidienne de {limit} tampons atteinte",
+      "insufficient_stamps": "Il faut {required} tampons, vous en avez {current}",
+      "insufficient_points": "Il faut {required} points, vous en avez {current}",
+      "pin_required": "Le code PIN du personnel est requis",
+      "pin_invalid": "Code PIN invalide",
+      "pin_locked": "PIN bloqué suite à trop de tentatives échouées"
+    }
+  }
+}

app/modules/loyalty/locales/lu.json

@@ -0,0 +1,72 @@
+{
+  "loyalty": {
+    "module": {
+      "name": "Treieprogrammer",
+      "description": "Stempel- a punktebaséiert Treieprogrammer mat Wallet-Integratioun"
+    },
+    "program": {
+      "title": "Treieprogramm",
+      "create": "Programm erstellen",
+      "edit": "Programm beaarbechten",
+      "activate": "Aktivéieren",
+      "deactivate": "Deaktivéieren",
+      "type": {
+        "stamps": "Stempelen",
+        "points": "Punkten",
+        "hybrid": "Hybrid"
+      }
+    },
+    "card": {
+      "title": "Treiekaart",
+      "number": "Kaartennummer",
+      "qr_code": "QR-Code",
+      "enroll": "Client umellen",
+      "deactivate": "Kaart deaktivéieren"
+    },
+    "stamp": {
+      "title": "Stempelen",
+      "add": "Stempel dobäisetzen",
+      "redeem": "Belounung aléisen",
+      "count": "{current} vun {target}",
+      "until_reward": "Nach {count} bis zur Belounung"
+    },
+    "points": {
+      "title": "Punkten",
+      "earn": "Punkten sammelen",
+      "redeem": "Punkten aléisen",
+      "balance": "{count} Punkten",
+      "per_euro": "{points} Punkten pro Euro"
+    },
+    "pin": {
+      "title": "Mataarbechter-PINen",
+      "create": "PIN erstellen",
+      "edit": "PIN beaarbechten",
+      "unlock": "PIN entspären",
+      "locked": "PIN gespaart bis {time}"
+    },
+    "wallet": {
+      "google": "Bäi Google Wallet bäisetzen",
+      "apple": "Bäi Apple Wallet bäisetzen"
+    },
+    "stats": {
+      "title": "Statistiken",
+      "total_cards": "Total Kaarten",
+      "active_cards": "Aktiv Kaarten",
+      "stamps_issued": "Ausgestallte Stempelen",
+      "rewards_redeemed": "Agelëst Belounungen"
+    },
+    "errors": {
+      "program_not_found": "Treieprogramm net fonnt",
+      "program_inactive": "Treieprogramm ass net aktiv",
+      "card_not_found": "Treiekaart net fonnt",
+      "card_inactive": "Treiekaart ass net aktiv",
+      "cooldown": "Waart w.e.g. {minutes} Minutten virum nächste Stempel",
+      "daily_limit": "Dageslimit vun {limit} Stempelen erreecht",
+      "insufficient_stamps": "Brauch {required} Stempelen, hutt {current}",
+      "insufficient_points": "Brauch {required} Punkten, hutt {current}",
+      "pin_required": "Mataarbechter-PIN erfuerdert",
+      "pin_invalid": "Ongültege PIN",
+      "pin_locked": "PIN gespaart wéinst ze vill Feelverséich"
+    }
+  }
+}