feat(booth): badge subscriber out-of-window entries in the live feed

A subscriber entering outside their plan's allowed window gets a deferred
transient charge (windowOwedMinor, collected/gated at exit) — but it was
SILENT at the booth: the entry showed as a plain subscriber pass with no hint
money is owed, so the operator only discovers it at exit.

Surface it: add a "out-of-window — owes fee" badge on any entry/exit event
carrying windowOwedMinor > 0, so the operator sees immediately that this
subscriber owes a fee. Also type the window-charge fields on LedgerPayload
(were riding the open-ended index signature).

Behaviour is otherwise unchanged and correct — verified the live "Mon Kukaleshi"
entry: entered 20:29 local (before the 21:00 Mon–Sat window, grace 5m), owes
100 ALL for 18:29–18:55Z, stamped on the signed entry, still owed, gated at
exit. Subscribers get no ticket by design. Build+lint 12/12.

Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V

apps/web/src/lib/i18n/en.ts

@@ -157,6 +157,7 @@ export const en: Catalog = {
     badgeManualOpen: "manual open",
     badgeSubRefused: "subscription refused",
     badgeSubSale: "subscription sale",
+    badgeWindowCharge: "out-of-window — owes fee",
     badgeNoTicket: "ticket not printed",
     feedSourceBooth: "booth",
     feedSourceReader: "reader",

apps/web/src/lib/i18n/sq.ts

@@ -161,6 +161,7 @@ export const sq = {
     badgeManualOpen: "hapje manuale",
     badgeSubRefused: "abonimi u refuzua",
     badgeSubSale: "shitje abonimi",
+    badgeWindowCharge: "jashtë orarit — detyrim",
     badgeNoTicket: "bileta nuk u printua",
     feedSourceBooth: "kabinë",
     feedSourceReader: "lexues",