feat: bump client-services (accumulated feature work + deploy fixes)

Snapshot of in-progress work across local_backend, manager_dashboard,
and waiter_pwa (pricing, chat, fiscal, prep zones, recovery codes, CRM,
inventory, permissions), plus the nginx/docker-compose deploy fixes for
the Unraid + NPM reverse-proxy setup.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

local_backend/routers/setup.py

@@ -6,6 +6,7 @@ import bcrypt
 
 from database import get_db
 from models.user import User
+from services.chat_service import add_user_to_system_group
 
 router = APIRouter()
 
@@ -49,7 +50,7 @@ def security_config(db: Session = Depends(get_db)):
 @router.get("/status", response_model=SetupStatusResponse)
 def setup_status(db: Session = Depends(get_db)):
     has_manager = db.query(User).filter(
-        User.role.in_(["manager", "sysadmin"]),
+        User.perm_access_dashboard == True,
         User.is_active == True,
     ).first()
     return SetupStatusResponse(needs_setup=has_manager is None)
@@ -58,7 +59,7 @@ def setup_status(db: Session = Depends(get_db)):
 @router.post("/init", response_model=SetupInitResponse)
 def setup_init(body: SetupInitRequest, db: Session = Depends(get_db)):
     has_manager = db.query(User).filter(
-        User.role.in_(["manager", "sysadmin"]),
+        User.perm_access_dashboard == True,
         User.is_active == True,
     ).first()
     if has_manager:
@@ -87,9 +88,13 @@ def setup_init(body: SetupInitRequest, db: Session = Depends(get_db)):
         password_hash=password_hash,
         email=body.email,
         full_name=body.full_name,
-        role="manager",
+        role="store_manager",
         is_active=True,
     )
+    # Apply store_manager default permissions
+    from roles import get_default_permissions
+    for field, value in get_default_permissions("store_manager").items():
+        setattr(user, field, value)
     db.add(user)
 
     # Persist venue settings if provided
@@ -113,4 +118,6 @@ def setup_init(body: SetupInitRequest, db: Session = Depends(get_db)):
                 db.add(PosSettings(key="venue.type", value=body.venue_type, updated_at=now))
 
     db.commit()
+    db.refresh(user)
+    add_user_to_system_group(db, user.id)
     return SetupInitResponse(ok=True)