feat(loyalty): wallet debug page, Google Wallet fixes, and module config env_file standardization

- Add wallet diagnostics page at /admin/loyalty/wallet-debug (super admin only)
  with explorer-sidebar pattern: config validation, class status, card inspector,
  save URL tester, recent enrollments, and Apple Wallet status panels
- Fix Google Wallet fat JWT: include both loyaltyClasses and loyaltyObjects in
  payload, use UNDER_REVIEW instead of DRAFT for class reviewStatus
- Fix StorefrontProgramResponse schema: accept google_class_id values while
  keeping exclude=True (was rejecting non-None values)
- Standardize all module configs to read from .env file directly
  (env_file=".env", extra="ignore") matching core Settings pattern
- Add MOD-026 architecture rule enforcing env_file in module configs
- Add SVC-005 noqa support in architecture validator
- Add test files for dev_tools domain_health and isolation_audit services
- Add google_wallet_status.py script for querying Google Wallet API
- Use table_wrapper macro in wallet-debug.html (FE-005 compliance)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/loyalty/routes/pages/admin.py

@@ -69,6 +69,19 @@ async def admin_loyalty_analytics(
 # ============================================================================
 
 
+@router.get("/wallet-debug", response_class=HTMLResponse, include_in_schema=False)
+async def admin_wallet_debug(
+    request: Request,
+    current_user: User = Depends(require_menu_access("wallet-debug", FrontendType.ADMIN)),
+    db: Session = Depends(get_db),
+):
+    """Render wallet diagnostics debug page (super admin only)."""
+    return templates.TemplateResponse(
+        "loyalty/admin/wallet-debug.html",
+        get_admin_context(request, db, current_user),
+    )
+
+
 @router.get(
     "/merchants/{merchant_id}",
     response_class=HTMLResponse,