feat(loyalty): Google Wallet production readiness — 10 hardening items

- Fix rate limiter to extract real client IP and handle sync/async endpoints
- Rate-limit public enrollment (10/min) and program info (30/min) endpoints
- Add 409 Conflict to non-retryable status codes in retry decorator
- Cache private key in get_save_url() to avoid re-reading JSON per call
- Make update_class() return bool success status with error-level logging
- Move Google Wallet config from core to loyalty module config
- Document time.sleep() safety in retry decorator (threadpool execution)
- Add per-card retry (1 retry, 2s delay) to wallet sync task
- Add logo URL reachability check (HEAD request) to validate_config()
- Add 26 comprehensive unit tests for GoogleWalletService

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/loyalty/config.py

@@ -36,6 +36,12 @@ class ModuleConfig(BaseSettings):
     apple_signer_cert_path: str | None = None  # Pass signing certificate
     apple_signer_key_path: str | None = None  # Pass signing key
 
+    # Google Wallet
+    google_issuer_id: str | None = None
+    google_service_account_json: str | None = None  # Path to service account JSON
+    google_wallet_origins: list[str] = []  # Allowed origins for save-to-wallet JWT
+    default_logo_url: str = "https://rewardflow.lu/static/modules/loyalty/shared/img/default-logo-200.png"
+
     # QR code settings
     qr_code_size: int = 300  # pixels