Changes

deploy: add pm2 boot-ordering override and server setup notes

pm2 started the frontend at boot before the iDempiere REST API (8443) was
up, causing a ~2 minute 502 storm after every server reboot. Ship the
systemd drop-in (wait for 8443, max 180s) plus notes on pm2-logrotate and
crontab leftovers so the server config stays reproducible.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

deploy: commit package-lock.json and switch production install to npm ci

The 2026-07-25 production build died in npm's resolver (Arborist
"Cannot read properties of null (reading 'edgesOut')") while resolving
the brand-new @vitejs/devtools-vite 0.4.8 published the day before.
Root cause: package-lock.json was gitignored and the deploy script even
deleted it, so every deploy re-resolved all semver ranges against the
live registry — any bad publish upstream could (and did) break deploys.

- Track package-lock.json (validated: npm ci passes, linux-x64 platform
  binaries included, AG Grid pinned at 35.2.1)
- Deploy scripts: drop the vestigial patch-package install (no patches/
  dir, not in package.json) and use npm ci instead of a lockfile-less
  npm install

The Jenkins job shell step must be updated manually to match
reference/ci/latest-working-jenkins-production.sh.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

ci: deploy script must not clobber pm2 boot-ordering override

The production deploy rewrote /etc/systemd/system/pm2-root.service.d/
override.conf with only the Environment lines, wiping the [Unit]
After=idempiere.service ordering and the wait-for-8443 ExecStartPre added
on 2026-07-25 (a deploy at 13:31 reverted it before the verification
reboot, which reproduced the 502 storm). Write the full drop-in from the
deploy script and document that the script heredoc is the source of truth.
NOTE: the Jenkins job runs a manually pasted copy of this script - it must
be updated there as well.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Add HideQty and DisallowExport for limited Roles

fix permission display