Adding staff and setting permissions

Add a user, assign a role, and (for cashiers) scope them to their outlet.

Keeping access safe

• Role-based permissions control what each person can see and do.
• Cashier logins are scoped to their branch.
• Read-only roles (for example Partner) give visibility without edit rights.
• Two-factor authentication is available, and sessions are revoked on password change.