feat: add vendor optional fields and configuration hooks

- Implemented VendorOptionalFields component to handle optional vendor details (mobile, email, address) with validation.
- Created useCustomerConfig hook to load optional customer field settings from Sales configuration.
- Developed useProcurementConfig hook to manage Procurement configuration flags.
- Introduced accessConfigApi for managing access configuration settings.
- Added openingBalancesApi for handling opening balances operations.
- Created procurementConfigApi for managing procurement configuration settings.
- Implemented nav-routes for permission-based routing.
- Developed PDF generation for purchase orders with dynamic vendor and item details.
- Added purchase-order tax helpers for tax calculations and formatting.
- Defined types for opening balances and related operations.

Backend/smoke/smoke_common.py

@@ -34,6 +34,9 @@ for _stream in (sys.stdout, sys.stderr):
     except (AttributeError, ValueError):
         pass
 
+# NOTE (roles moved into the ERP, 2026-10): permissions no longer come from the AuthHex token. The smoke user must be an
+# ADMINISTRATOR IN THE ERP (users.RoleId pointing at the role flagged IsAdmin), e.g. assigned under Settings -> Users, or the
+# Nav-policy endpoints these scripts hit will answer 403. The ports below are also stale (ERPCore 6701, AuthHex 6703).
 DEFAULTS = {
     "api": "http://localhost:5224/api/v1",
     "auth": "http://localhost:5602",