M1 Shop Scoping (local)

8/8 local checks passed.

Filter helper (getPosConfigFilterForSelection) returns correct shape for the empty-mapping case — prevents a landing-page blanking bug on the prod demo tenant where cafe.shop_pos_configs is still empty.
Odoo domain compiled from the helper uses canonical Polish notation: ["|", [IN include], [NOT IN allMapped]] — OR-combined so unmapped configs survive as a fallback on "All shops".
Dashboard / Orders / Reports routes don't 5xx unauthenticated — SSR of the new code paths is clean (307 redirect to login, as before).
Graceful fallback: when a tenant has zero shop_pos_configs, the filter produces NOT IN [] on the unmapped branch, matching all orders — zero regression vs pre-M1.

Filter helper output — empty mapping (prod-demo simulation)