feat(fusion_clock): PIN kiosk — polished photo-tile + PIN clock (opt-in)

A proper shared-device PIN kiosk for clients who don't want NFC: photo-tile grid
(+search) -> tap -> PIN (or first-use create) -> optional master-gated selfie ->
clock, in the NFC kiosk's dark glass + brand-gradient style. Built as an Odoo 19
Interaction; new pin_kiosk.scss (scoped); reworked clock_kiosk.py
(search +avatar/has_pin, verify_pin needs_setup, set_pin, clock via kiosk location).
Drops the redundant kiosk_pin_required (PIN always required); relabels the company
kiosk location; adds a PIN-kiosk app icon. Opt-in via enable_kiosk (off by default).
HttpCase tests added. Bump 19.0.4.0.0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

fusion_clock/models/res_company.py

@@ -10,8 +10,7 @@ class ResCompany(models.Model):
 
     x_fclk_nfc_kiosk_location_id = fields.Many2one(
         'fusion.clock.location',
-        string='NFC Kiosk Location',
+        string='Kiosk Location',
         domain="[('company_id', '=', id)]",
-        help="Designates which fusion.clock.location is bound to the NFC kiosk "
-             "for this company. Required when NFC kiosk is enabled.",
+        help="Clock location bound to the on-site kiosk (NFC and PIN) for this company.",
     )