feat(fusion_clock): always-available kiosk photo action + compact manager PIN pad

NFC kiosk:
- Add "📷 Photo" action to every Manage-page employee row and to the
  post-enroll result card, so a manager can set/replace a profile photo
  at any time (previously only surfaced when the employee had no image).
- Slim the Manager PIN pad: dedicated --pin panel variant (max-width 360px,
  reduced padding) with a tighter numpad, removing the oversized whitespace.

Deployed live to entech (LXC 111) as 19.0.3.11.0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

fusion_clock/static/src/scss/nfc_kiosk.scss

@@ -512,6 +512,9 @@ html:has(#nfc_kiosk_root) {
     max-height: 92vh;
     overflow-y: auto;
 
+    // Compact PIN-pad variant — narrower + tighter than the wide list panels
+    &--pin { width: auto; max-width: 360px; padding: 1.5rem 1.5rem 1.25rem; }
+
     h2 {
         font-size: 1.5rem;
         margin: 0 0 1.5rem;
@@ -522,12 +525,12 @@ html:has(#nfc_kiosk_root) {
     .numpad {
         display: grid;
         grid-template-columns: repeat(3, 1fr);
-        gap: 0.75rem;
-        margin: 1rem 0;
+        gap: 0.5rem;
+        margin: 0.5rem 0 0.75rem;
 
         button {
-            font-size: 1.7rem;
-            padding: 1.1rem 0;
+            font-size: 1.45rem;
+            padding: 0.7rem 0;
             background: rgba(255,255,255,0.05);
             color: var(--nfc-text);
             border: 1px solid rgba(255,255,255,0.1);