feat: per-site QR menu mode (order vs view-only) + editable branding

Adds a sysadmin-configurable toggle so sites can disable online ordering
on the public QR menu until it's fully supported, plus editable
tagline/hours and a header image (replacing the hardcoded "Our Menu"
placeholder) — all previously hardcoded frontend strings.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

cloud_backend/main.py

@@ -1,6 +1,8 @@
+import os
 from contextlib import asynccontextmanager
 from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware
+from fastapi.staticfiles import StaticFiles
 
 from config import settings
 from database import engine, Base
@@ -39,6 +41,13 @@ def _run_migrations():
     migrations = [
         # Per-site order counter for public_ref generation (e.g. "ORD-0042")
         "ALTER TABLE sites ADD COLUMN order_counter INTEGER NOT NULL DEFAULT 0",
+        # QR menu branding/config
+        "ALTER TABLE sites ADD COLUMN menu_mode VARCHAR NOT NULL DEFAULT 'order'",
+        "ALTER TABLE sites ADD COLUMN menu_tagline_en VARCHAR",
+        "ALTER TABLE sites ADD COLUMN menu_tagline_gr VARCHAR",
+        "ALTER TABLE sites ADD COLUMN menu_hours_en VARCHAR",
+        "ALTER TABLE sites ADD COLUMN menu_hours_gr VARCHAR",
+        "ALTER TABLE sites ADD COLUMN menu_header_image_url VARCHAR",
     ]
     for sql in migrations:
         try:
@@ -74,6 +83,9 @@ app.include_router(orders_router.router,          prefix="/api/orders",    tags=
 app.include_router(manager_auth_router.router,    prefix="/api/manager",   tags=["manager"])
 app.include_router(remote_dashboard_router.router,prefix="/api/remote",    tags=["remote"])
 
+os.makedirs("/app/data/site_headers", exist_ok=True)
+app.mount("/static/site_headers", StaticFiles(directory="/app/data/site_headers"), name="site_headers")
+
 
 @app.get("/health")
 def health():