feat(loyalty): implement Phase 2 - company-wide points system

Complete implementation of loyalty module Phase 2 features:

Database & Models:
- Add company_id to LoyaltyProgram for chain-wide loyalty
- Add company_id to LoyaltyCard for multi-location support
- Add CompanyLoyaltySettings model for admin-controlled settings
- Add points expiration, welcome bonus, and minimum redemption fields
- Add POINTS_EXPIRED, WELCOME_BONUS transaction types

Services:
- Update program_service for company-based queries
- Update card_service with enrollment and welcome bonus
- Update points_service with void_points for returns
- Update stamp_service for company context
- Update pin_service for company-wide operations

API Endpoints:
- Admin: Program listing with stats, company detail views
- Vendor: Terminal operations, card management, settings
- Storefront: Customer card/transactions, self-enrollment

UI Templates:
- Admin: Programs dashboard, company detail, settings
- Vendor: Terminal, cards list, card detail, settings, stats, enrollment
- Storefront: Dashboard, history, enrollment, success pages

Background Tasks:
- Point expiration task (daily, based on inactivity)
- Wallet sync task (hourly)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/modules/loyalty/routes/pages/admin.py

@@ -0,0 +1,124 @@
+# app/modules/loyalty/routes/pages/admin.py
+"""
+Loyalty Admin Page Routes (HTML rendering).
+
+Admin pages for:
+- Platform loyalty programs dashboard
+- Company loyalty program detail/configuration
+- Platform-wide loyalty statistics
+"""
+
+from fastapi import APIRouter, Depends, Path, Request
+from fastapi.responses import HTMLResponse
+from sqlalchemy.orm import Session
+
+from app.api.deps import get_db, require_menu_access
+from app.templates_config import templates
+from app.modules.enums import FrontendType
+from app.modules.tenancy.models import User
+
+router = APIRouter()
+
+# Route configuration for module route discovery
+ROUTE_CONFIG = {
+    "prefix": "/loyalty",
+    "tags": ["admin-loyalty"],
+}
+
+
+# ============================================================================
+# LOYALTY PROGRAMS DASHBOARD
+# ============================================================================
+
+
+@router.get("/programs", response_class=HTMLResponse, include_in_schema=False)
+async def admin_loyalty_programs(
+    request: Request,
+    current_user: User = Depends(require_menu_access("loyalty-programs", FrontendType.ADMIN)),
+    db: Session = Depends(get_db),
+):
+    """
+    Render loyalty programs dashboard.
+    Shows all companies with loyalty programs and platform-wide statistics.
+    """
+    return templates.TemplateResponse(
+        "loyalty/admin/programs.html",
+        {
+            "request": request,
+            "user": current_user,
+        },
+    )
+
+
+@router.get("/analytics", response_class=HTMLResponse, include_in_schema=False)
+async def admin_loyalty_analytics(
+    request: Request,
+    current_user: User = Depends(require_menu_access("loyalty-analytics", FrontendType.ADMIN)),
+    db: Session = Depends(get_db),
+):
+    """
+    Render loyalty analytics dashboard.
+    Shows platform-wide loyalty statistics and trends.
+    """
+    return templates.TemplateResponse(
+        "loyalty/admin/analytics.html",
+        {
+            "request": request,
+            "user": current_user,
+        },
+    )
+
+
+# ============================================================================
+# COMPANY LOYALTY DETAIL
+# ============================================================================
+
+
+@router.get(
+    "/companies/{company_id}",
+    response_class=HTMLResponse,
+    include_in_schema=False,
+)
+async def admin_loyalty_company_detail(
+    request: Request,
+    company_id: int = Path(..., description="Company ID"),
+    current_user: User = Depends(require_menu_access("loyalty-programs", FrontendType.ADMIN)),
+    db: Session = Depends(get_db),
+):
+    """
+    Render company loyalty program detail page.
+    Shows company's loyalty program configuration and location breakdown.
+    """
+    return templates.TemplateResponse(
+        "loyalty/admin/company-detail.html",
+        {
+            "request": request,
+            "user": current_user,
+            "company_id": company_id,
+        },
+    )
+
+
+@router.get(
+    "/companies/{company_id}/settings",
+    response_class=HTMLResponse,
+    include_in_schema=False,
+)
+async def admin_loyalty_company_settings(
+    request: Request,
+    company_id: int = Path(..., description="Company ID"),
+    current_user: User = Depends(require_menu_access("loyalty-programs", FrontendType.ADMIN)),
+    db: Session = Depends(get_db),
+):
+    """
+    Render company loyalty settings page.
+    Admin-controlled settings like staff PIN policy.
+    """
+    return templates.TemplateResponse(
+        "loyalty/admin/company-settings.html",
+        {
+            "request": request,
+            "user": current_user,
+            "company_id": company_id,
+        },
+    )