Add /fusion_clock/kiosk/nfc/tap JSON-RPC endpoint that toggles attendance via _attendance_action_change, writing x_fclk_clock_source='nfc_kiosk' and location on clock-in, applying break deduction/penalty checks on clock-out. Add 2 HttpCase tests (clock-in + clock-out with 6s debounce sleep). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>