feat: bump client-services (accumulated feature work + deploy fixes)

Snapshot of in-progress work across local_backend, manager_dashboard,
and waiter_pwa (pricing, chat, fiscal, prep zones, recovery codes, CRM,
inventory, permissions), plus the nginx/docker-compose deploy fixes for
the Unraid + NPM reverse-proxy setup.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

local_backend/schemas/user.py

@@ -16,7 +16,22 @@ class UserBase(BaseModel):
     email: Optional[str] = None
     # Phase 2B — payroll
     hourly_rate: Optional[float] = None
-    can_cancel_orders: bool = False
+    # Access permissions
+    perm_access_dashboard: bool = False
+    perm_access_waiter_app: bool = True
+    perm_access_kds: bool = False
+    # Order action permissions
+    perm_cancel_orders: bool = False
+    perm_apply_discounts: bool = False
+    perm_modify_prices: bool = False
+    perm_open_orders: bool = True
+    perm_close_orders: bool = True
+    # Management permissions
+    perm_view_reports: bool = False
+    perm_manage_staff: bool = False
+    perm_manage_tables: bool = False
+    perm_manage_menu: bool = False
+    perm_manage_settings: bool = False
 
 
 class UserCreate(UserBase):
@@ -34,7 +49,22 @@ class UserUpdate(BaseModel):
     note: Optional[str] = None
     # Phase 2B — payroll
     hourly_rate: Optional[float] = None
-    can_cancel_orders: Optional[bool] = None
+    # Access permissions
+    perm_access_dashboard: Optional[bool] = None
+    perm_access_waiter_app: Optional[bool] = None
+    perm_access_kds: Optional[bool] = None
+    # Order action permissions
+    perm_cancel_orders: Optional[bool] = None
+    perm_apply_discounts: Optional[bool] = None
+    perm_modify_prices: Optional[bool] = None
+    perm_open_orders: Optional[bool] = None
+    perm_close_orders: Optional[bool] = None
+    # Management permissions
+    perm_view_reports: Optional[bool] = None
+    perm_manage_staff: Optional[bool] = None
+    perm_manage_tables: Optional[bool] = None
+    perm_manage_menu: Optional[bool] = None
+    perm_manage_settings: Optional[bool] = None
 
 
 class WaiterZoneOut(BaseModel):
@@ -49,6 +79,7 @@ class UserOut(UserBase):
     id: int
     created_at: UTCDatetime
     zone_assignments: List[WaiterZoneOut] = []
+    waiter_settings: Optional[str] = None  # JSON blob — per-waiter settings + favorites
 
     model_config = {"from_attributes": True}
 
@@ -68,3 +99,9 @@ class AssistantAssignmentOut(BaseModel):
     assigned_at: UTCDatetime
 
     model_config = {"from_attributes": True}
+
+
+class PermissionToggle(BaseModel):
+    """Patch a single permission flag for a staff member."""
+    permission: str
+    value: bool