ordera-api (pos) dev — staff auth + admin settings live at /admin, entities/functions not ported yet