Add a per-event walk-in price and a POS tender to the door screen.

Events can now set an optional walk-in price (events.walk_in_price):
null falls back to the ticket price, 0 is a free walk-in. It is set in
the Create/Edit Event modal (EN/ES) and carried through create, update
and duplicate, but it is internal: public event responses and the
attendee-facing ticket/dashboard endpoints drop it, and only admin,
organizer and staff callers receive it.

The door screen no longer trusts the amount the client sends. It sends
a quantity and the server prices the charge from the event record:
walk-ins pay the walk-in price, existing tickets the ticket price. A
typed amount is only honoured with amountOverride from admin/organizer
and is written to audit_logs in the same transaction. The charged
amount stays snapshotted on the payment row.

POS is a new door tender for the physical card terminal. Staff pick
POS, see the amount to key in, charge the card, then confirm with
"Mark as paid"; it is then recorded like any other door payment
(provider and method 'pos'). It can be switched off globally or per
event via payment options, and shows up in the payments filters,
bookings, revenue summaries and door takings. PosChargePanel is where
an automatic terminal push would go later; nothing calls a terminal
today.

tickets.booking_source (online | walk_in | admin) records how a booking
was made. The migration backfills walk-ins from the door screen's
idempotency records; everything else stays online.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

backend/src/lib/walkInPrice.test.ts

@@ -0,0 +1,49 @@
+import { describe, it, expect } from 'vitest';
+import { resolveWalkInPrice, omitWalkInPrice, parseWalkInPrice, canSeeWalkInPrice } from './walkInPrice.js';
+
+describe('resolveWalkInPrice', () => {
+  it('falls back to the ticket price when no walk-in price is set', () => {
+    expect(resolveWalkInPrice({ price: 21000, walkInPrice: null })).toEqual({ unitPrice: 21000, source: 'ticket' });
+    expect(resolveWalkInPrice({ price: 21000 })).toEqual({ unitPrice: 21000, source: 'ticket' });
+  });
+
+  it('treats 0 as a free walk-in, not as unset', () => {
+    expect(resolveWalkInPrice({ price: 21000, walkInPrice: 0 })).toEqual({ unitPrice: 0, source: 'walk_in' });
+  });
+
+  it('uses a set walk-in price', () => {
+    expect(resolveWalkInPrice({ price: 21000, walkInPrice: 25000 })).toEqual({ unitPrice: 25000, source: 'walk_in' });
+  });
+
+  it('reads Postgres decimal strings', () => {
+    expect(resolveWalkInPrice({ price: '21000.00', walkInPrice: '25000.00' })).toEqual({ unitPrice: 25000, source: 'walk_in' });
+    expect(resolveWalkInPrice({ price: '21000.00', walkInPrice: null })).toEqual({ unitPrice: 21000, source: 'ticket' });
+    expect(parseWalkInPrice('0.00')).toBe(0);
+    expect(parseWalkInPrice('')).toBeNull();
+  });
+});
+
+describe('omitWalkInPrice', () => {
+  it('drops the walk-in price and keeps everything else', () => {
+    const event = { id: 'e1', price: 21000, walkInPrice: 25000, currency: 'PYG' };
+    const result = omitWalkInPrice(event);
+    expect(result).not.toHaveProperty('walkInPrice');
+    expect(result).toEqual({ id: 'e1', price: 21000, currency: 'PYG' });
+    expect(event.walkInPrice).toBe(25000);
+  });
+
+  it('passes null through', () => {
+    expect(omitWalkInPrice(null)).toBeNull();
+  });
+});
+
+describe('canSeeWalkInPrice', () => {
+  it('is limited to event managers and door staff', () => {
+    expect(canSeeWalkInPrice('admin')).toBe(true);
+    expect(canSeeWalkInPrice('organizer')).toBe(true);
+    expect(canSeeWalkInPrice('staff')).toBe(true);
+    expect(canSeeWalkInPrice('marketing')).toBe(false);
+    expect(canSeeWalkInPrice('user')).toBe(false);
+    expect(canSeeWalkInPrice(null)).toBe(false);
+  });
+});