feat: re-model drawer cash as directional vouchers (Mandat Arkëtimi / Pagese)

Replace the single signed-± cash_movement with two distinct financial
documents — the direction is the event TYPE, not the sign of an amount:

  cash_in  = Mandat Arkëtimi (receipt / pay-IN,  +)  voucher AR-NNNN
  cash_out = Mandat Pagese  (disbursement / pay-OUT, −)  voucher PA-NNNN

Each carries a positive magnitude, voucher number, reason, the operator who
raised it and the admin who authorized it, and prints an Albanian slip.

Authorization changes from admin-only to operator-RAISED / admin-AUTHORIZED:
any shift:create holder raises the voucher, but POST /api/cash-voucher only
commits when authorizedBy is a real admin (shift:cash) re-entering their
password (verified server-side). Keeps the float control while letting the
operator do the booth paperwork.

Legacy cash_movement events are kept — they still verify and still fold into
the drawer (signed-±); the append-only chain is never rewritten. The drawer
fold and the Z-report window now sum all three types.

Verified against a copy of the live DB with the real signing modules:
cash_in 3000 + cash_out 5000 → drawer −2000, hash-chain verifies OK.

Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V

apps/web/src/lib/i18n/en.ts

@@ -144,6 +144,8 @@ export const en: Catalog = {
     evtShiftOpen: "SHIFT+",
     evtShiftZ: "SHIFT Z",
     evtCashMovement: "CASH",
+    evtCashIn: "PAY-IN",
+    evtCashOut: "PAY-OUT",
     evtAnomaly: "ANOMALY",
     // live-feed event detail line + classification badges (computed from payload)
     evtNoReason: "no reason recorded",
@@ -511,10 +513,18 @@ export const en: Catalog = {
     drawer: "Drawer:",
     openingFloatInherited: "(opening float inherited from the prior shift)",
     drawerCashAdmin: "Drawer cash (admin) — load or remove the float",
+    drawerVoucher: "Drawer voucher — operator raises, an admin authorizes",
     amount: "amount",
     reasonPlaceholder: "reason (e.g. opening float)",
     load: "Load +",
     remove: "Remove −",
+    authName: "admin username",
+    authPassword: "admin password",
+    authRequired: "An admin must authorize: enter their username and password.",
+    mandatArketimi: "Receipt (in) +",
+    mandatPagese: "Disbursement (out) −",
+    voucherHint: "A receipt (Mandat Arkëtimi) adds cash; a disbursement (Mandat Pagese) removes it. The float only moves with an admin's sign-off.",
+    voucherRecorded: "Voucher {{no}} recorded. Drawer now {{amount}}.",
     enterPositive: "Enter a positive amount.",
     drawerNow: "Drawer now {{amount}}.",
     zReport: "Z-REPORT",