feat: re-model drawer cash as directional vouchers (Mandat Arkëtimi / Pagese)

Replace the single signed-± cash_movement with two distinct financial
documents — the direction is the event TYPE, not the sign of an amount:

  cash_in  = Mandat Arkëtimi (receipt / pay-IN,  +)  voucher AR-NNNN
  cash_out = Mandat Pagese  (disbursement / pay-OUT, −)  voucher PA-NNNN

Each carries a positive magnitude, voucher number, reason, the operator who
raised it and the admin who authorized it, and prints an Albanian slip.

Authorization changes from admin-only to operator-RAISED / admin-AUTHORIZED:
any shift:create holder raises the voucher, but POST /api/cash-voucher only
commits when authorizedBy is a real admin (shift:cash) re-entering their
password (verified server-side). Keeps the float control while letting the
operator do the booth paperwork.

Legacy cash_movement events are kept — they still verify and still fold into
the drawer (signed-±); the append-only chain is never rewritten. The drawer
fold and the Z-report window now sum all three types.

Verified against a copy of the live DB with the real signing modules:
cash_in 3000 + cash_out 5000 → drawer −2000, hash-chain verifies OK.

Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V

apps/web/src/lib/i18n/en.ts

@@ -144,6 +144,8 @@ export const en: Catalog = {
     evtShiftOpen: "SHIFT+",
     evtShiftZ: "SHIFT Z",
     evtCashMovement: "CASH",
+    evtCashIn: "PAY-IN",
+    evtCashOut: "PAY-OUT",
     evtAnomaly: "ANOMALY",
     // live-feed event detail line + classification badges (computed from payload)
     evtNoReason: "no reason recorded",
@@ -511,10 +513,18 @@ export const en: Catalog = {
     drawer: "Drawer:",
     openingFloatInherited: "(opening float inherited from the prior shift)",
     drawerCashAdmin: "Drawer cash (admin) — load or remove the float",
+    drawerVoucher: "Drawer voucher — operator raises, an admin authorizes",
     amount: "amount",
     reasonPlaceholder: "reason (e.g. opening float)",
     load: "Load +",
     remove: "Remove −",
+    authName: "admin username",
+    authPassword: "admin password",
+    authRequired: "An admin must authorize: enter their username and password.",
+    mandatArketimi: "Receipt (in) +",
+    mandatPagese: "Disbursement (out) −",
+    voucherHint: "A receipt (Mandat Arkëtimi) adds cash; a disbursement (Mandat Pagese) removes it. The float only moves with an admin's sign-off.",
+    voucherRecorded: "Voucher {{no}} recorded. Drawer now {{amount}}.",
     enterPositive: "Enter a positive amount.",
     drawerNow: "Drawer now {{amount}}.",
     zReport: "Z-REPORT",

apps/web/src/lib/i18n/sq.ts

@@ -148,6 +148,8 @@ export const sq = {
     evtShiftOpen: "TURN+",
     evtShiftZ: "TURN Z",
     evtCashMovement: "ARKË",
+    evtCashIn: "ARKËTIM",
+    evtCashOut: "PAGESË",
     evtAnomaly: "ANOMALI",
     // rreshti i detajeve të eventit live + etiketat e klasifikimit (nga payload)
     evtNoReason: "pa arsye të regjistruar",
@@ -523,10 +525,18 @@ export const sq = {
     drawer: "Arka:",
     openingFloatInherited: "(bilanci fillestar i trashëguar nga turni i mëparshëm)",
     drawerCashAdmin: "Para në arkë (admin) — shto ose hiq bilancin",
+    drawerVoucher: "Mandat arke — operatori e hap, admini e autorizon",
     amount: "shuma",
     reasonPlaceholder: "arsyeja (p.sh. bilanci fillestar)",
     load: "Shto +",
     remove: "Hiq −",
+    authName: "përdoruesi i adminit",
+    authPassword: "fjalëkalimi i adminit",
+    authRequired: "Një admin duhet ta autorizojë: shkruaj përdoruesin dhe fjalëkalimin e tij.",
+    mandatArketimi: "Arkëtim (hyrje) +",
+    mandatPagese: "Pagesë (dalje) −",
+    voucherHint: "Mandat Arkëtimi shton para; Mandat Pagese heq para. Arka lëviz vetëm me autorizimin e një admini.",
+    voucherRecorded: "Mandati {{no}} u regjistrua. Arka tani {{amount}}.",
     enterPositive: "Shkruaj një shumë pozitive.",
     drawerNow: "Arka tani {{amount}}.",
     zReport: "RAPORT Z",