fix(modules): Car Wash depends on parking only — the discount engine is core, not the validation module

A site entitled to parking,carwash had the wash silently dropped as dependency-broken.
The validation program routes (compose/read) leave the validation module gate; the
merchant scan routes (mine/lookup/apply/void) stay behind it.

Claude-Session: https://claude.ai/code/session_01FWncR69HgGPuei1dLrW3cU

wiki/log.md

@@ -3039,3 +3039,13 @@ every module → every booth on 55d6242 had Car Wash entitled. Fix: compose forw
 default `parking,validation`. Troubleshoot on a booth with `docker exec … env | grep MODULES`
 and the boot log line `venue modules (entitled = …; effective = …)`. Recorded on
 [[venue-modules]] §As-built (deploy gotcha).
+
+## [2026-09-06] ingest | Car Wash no longer depends on the validation module
+
+User set `MODULES_ENTITLED=parking,carwash` on park-2 — no Lavazh. Cause: the manifest said
+carwash `dependsOn: ["parking","validation"]`, so the effective set dropped it as dependency-
+broken, and the program compose/read routes sat behind the validation module gate. That was a
+design error: the discount ENGINE (validation program rows + `applyValidation()`) is core; the
+`validation` module is only the merchant's scan screen. Fixed: `dependsOn: ["parking"]`; the
+program routes are plain site:read/site:update; the merchant routes (mine/lookup/apply/void)
+stay module-gated. Tests updated. Recorded on [[venue-modules]] (v1 answers item 4 + As-built).