feat(fusion_clock): schedule-driven attendance automation

Reminders, absence detection, late/early penalties, and auto-clock-out are now
driven by each employee's real schedule (posted planner entry -> recurring
shift), never the global 9-5 default. Employees who aren't scheduled get no
reminders/absence. Overtime past the scheduled end is never cut off — auto
clock-out only fires at a max-shift safety cap (default raised 12 -> 16h). Team
leads build the planner in draft and Post it (publishes + emails employees).

- hr.employee._get_fclk_day_plan: explicit `scheduled` flag; posted-only planner
  entries (drafts ignored), else recurring shift covering that weekday, else
  not-scheduled; sources 'schedule'/'shift'/'none'.
- fusion.clock.shift: day_mon..day_sun weekday pattern + covers_weekday().
- fusion.clock.schedule: draft/posted state + posted_date; planner edits reset
  to draft; fclk_email_posted_week notification.
- Rewrote the reminder / absence / auto-clock-out crons: schedule-gated,
  per-employee savepoints, OT-aware cap, weekend hardcode removed.
- Penalties + all three clock-in paths skip days the employee isn't scheduled.
- shift_planner: Post Week route + planner Post button + draft count.
- Migration backfills pre-existing schedule entries to 'posted' so they keep
  driving automation after upgrade.
- Tests: resolver matrix, cron gating, OT cap; fixed the existing planner test
  for the new state/source semantics.

Design: docs/superpowers/specs/2026-05-30-schedule-driven-attendance-design.md
Frontend footprint kept at zero to avoid colliding with the concurrent
employee-portal (payslips) work.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

fusion_clock/controllers/clock_api.py

@@ -110,7 +110,8 @@ class FusionClockAPI(http.Controller):
         if ICP.get_param('fusion_clock.enable_penalties', 'True') != 'True':
             return
         day_plan = employee._get_fclk_day_plan(get_local_today(request.env, employee))
-        if day_plan.get('source') == 'schedule' and day_plan.get('is_off'):
+        if not day_plan.get('scheduled'):
+            # No late/early penalties on days the employee isn't scheduled to work.
             return
 
         grace = float(ICP.get_param('fusion_clock.penalty_grace_minutes', '5'))
@@ -282,7 +283,8 @@ class FusionClockAPI(http.Controller):
         now = fields.Datetime.now()
         today = get_local_today(request.env, employee)
         day_plan = employee._get_fclk_day_plan(today)
-        is_scheduled_off = day_plan.get('source') == 'schedule' and day_plan.get('is_off')
+        # "Unscheduled" = a posted OFF day OR a day with no schedule at all.
+        is_scheduled_off = not day_plan.get('scheduled')
 
         geo_info = {
             'latitude': latitude,
@@ -325,7 +327,7 @@ class FusionClockAPI(http.Controller):
                 if is_scheduled_off:
                     self._log_activity(
                         employee, 'unscheduled_shift',
-                        f"Clocked in on a scheduled OFF day at {location.name}.",
+                        f"Clocked in on an unscheduled day at {location.name}.",
                         attendance=attendance, location=location,
                         latitude=latitude, longitude=longitude, distance=distance,
                         source=source,
@@ -335,7 +337,7 @@ class FusionClockAPI(http.Controller):
                         request.env['hr.attendance'].sudo()._fclk_notify_office(
                             office_user_id,
                             f"Unscheduled Shift: {employee.name}",
-                            f"{employee.name} clocked in on a scheduled OFF day.",
+                            f"{employee.name} clocked in on an unscheduled day.",
                             'hr.attendance',
                             attendance.id,
                         )