feat(loyalty): implement complete loyalty module MVP

Add stamp-based and points-based loyalty programs for vendors with:

Database Models (5 tables):
- loyalty_programs: Vendor program configuration
- loyalty_cards: Customer cards with stamp/point balances
- loyalty_transactions: Immutable audit log
- staff_pins: Fraud prevention PINs (bcrypt hashed)
- apple_device_registrations: Apple Wallet push tokens

Services:
- program_service: Program CRUD and statistics
- card_service: Customer enrollment and card lookup
- stamp_service: Stamp operations with anti-fraud checks
- points_service: Points earning and redemption
- pin_service: Staff PIN management with lockout
- wallet_service: Unified wallet abstraction
- google_wallet_service: Google Wallet API integration
- apple_wallet_service: Apple Wallet .pkpass generation

API Routes:
- Admin: /api/v1/admin/loyalty/* (programs list, stats)
- Vendor: /api/v1/vendor/loyalty/* (stamp, points, cards, PINs)
- Public: /api/v1/loyalty/* (enrollment, Apple Web Service)

Anti-Fraud Features:
- Staff PIN verification (configurable per program)
- Cooldown period between stamps (default 15 min)
- Daily stamp limits (default 5/day)
- PIN lockout after failed attempts

Wallet Integration:
- Google Wallet: LoyaltyClass and LoyaltyObject management
- Apple Wallet: .pkpass generation with PKCS#7 signing
- Apple Web Service endpoints for device registration/updates

Also includes:
- Alembic migration for all tables with indexes
- Localization files (en, fr, de, lu)
- Module documentation
- Phase 2 interface and user journey plan

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/modules/loyalty/locales/lu.json

@@ -0,0 +1,72 @@
+{
+  "loyalty": {
+    "module": {
+      "name": "Treieprogrammer",
+      "description": "Stempel- a punktebaséiert Treieprogrammer mat Wallet-Integratioun"
+    },
+    "program": {
+      "title": "Treieprogramm",
+      "create": "Programm erstellen",
+      "edit": "Programm beaarbechten",
+      "activate": "Aktivéieren",
+      "deactivate": "Deaktivéieren",
+      "type": {
+        "stamps": "Stempelen",
+        "points": "Punkten",
+        "hybrid": "Hybrid"
+      }
+    },
+    "card": {
+      "title": "Treiekaart",
+      "number": "Kaartennummer",
+      "qr_code": "QR-Code",
+      "enroll": "Client umellen",
+      "deactivate": "Kaart deaktivéieren"
+    },
+    "stamp": {
+      "title": "Stempelen",
+      "add": "Stempel dobäisetzen",
+      "redeem": "Belounung aléisen",
+      "count": "{current} vun {target}",
+      "until_reward": "Nach {count} bis zur Belounung"
+    },
+    "points": {
+      "title": "Punkten",
+      "earn": "Punkten sammelen",
+      "redeem": "Punkten aléisen",
+      "balance": "{count} Punkten",
+      "per_euro": "{points} Punkten pro Euro"
+    },
+    "pin": {
+      "title": "Mataarbechter-PINen",
+      "create": "PIN erstellen",
+      "edit": "PIN beaarbechten",
+      "unlock": "PIN entspären",
+      "locked": "PIN gespaart bis {time}"
+    },
+    "wallet": {
+      "google": "Bäi Google Wallet bäisetzen",
+      "apple": "Bäi Apple Wallet bäisetzen"
+    },
+    "stats": {
+      "title": "Statistiken",
+      "total_cards": "Total Kaarten",
+      "active_cards": "Aktiv Kaarten",
+      "stamps_issued": "Ausgestallte Stempelen",
+      "rewards_redeemed": "Agelëst Belounungen"
+    },
+    "errors": {
+      "program_not_found": "Treieprogramm net fonnt",
+      "program_inactive": "Treieprogramm ass net aktiv",
+      "card_not_found": "Treiekaart net fonnt",
+      "card_inactive": "Treiekaart ass net aktiv",
+      "cooldown": "Waart w.e.g. {minutes} Minutten virum nächste Stempel",
+      "daily_limit": "Dageslimit vun {limit} Stempelen erreecht",
+      "insufficient_stamps": "Brauch {required} Stempelen, hutt {current}",
+      "insufficient_points": "Brauch {required} Punkten, hutt {current}",
+      "pin_required": "Mataarbechter-PIN erfuerdert",
+      "pin_invalid": "Ongültege PIN",
+      "pin_locked": "PIN gespaart wéinst ze vill Feelverséich"
+    }
+  }
+}