Waiter App Sign-In Hardened
ImprovementThe waiter app now opens an account with that account's own password only. A fixed support password that used to sign in as any user has been removed.
The app's access token is issued after every check (account, waiter/captain role, single-device rule) — a refused sign-in leaves nothing behind — and it is scoped to the waiter app and your restaurant instead of opening every app. Waiters sign in again once to pick up the new token; nothing else changes on the floor.