THE LABS GADGET CRM — EXPRESS ATTENDANCE SETTINGS MENU PATCH
===============================================================

PURPOSE
Adds one Owner-only shortcut to the existing Compact Workspace sidebar:
Team & Reports > Attendance Settings (Staff PIN)
Opens attendance-setup.php, where Owner can configure staff PINs,
shop GPS geofence, and selfie retention. Other CRM functions remain unchanged.

REQUIREMENTS
- Fasa 16 + Compact Workspace UI Refresh already installed.
- Express Attendance Selfie + GPS patch already installed and activated.
- attendance-setup.php exists in the same CRM folder as crm-ui-nav.php.

INSTALLATION
1. Before modifying production, back up the website files (outside public_html)
   and a recent database SQL export. The patch makes no DB changes.
2. In cPanel File Manager, separately download your CURRENT crm-ui-nav.php.
3. If you made custom edits to that file since installing UI Refresh, MERGE
   the one new link instead of overwriting. The new menu entry belongs under
   'Team & Reports', immediately after 'Attendance & HR':
      ['Attendance Settings (Staff PIN)','attendance-setup.php','⚙',$role === 'admin',['attendance-setup.php']],
4. Upload/extract this ZIP inside the active CRM folder containing dashboard.php.
   Overwrite ONLY crm-ui-nav.php. No other PHP file should be overwritten.
5. Refresh Dashboard with Cmd+Shift+R (Mac) or Ctrl+Shift+R (Windows).
6. Owner: Sidebar > Team & Reports > Attendance Settings (Staff PIN).
   Open it, choose staff, enter/confirm six-digit PIN and Save / Reset PIN.
7. Verify HR/Manager/Technician/Frontdesk do not see this shortcut.

SECURITY
- Link is visible only for role `admin` (Owner).
- The attendance-setup.php endpoint itself uses require_admin() for protection.
- Hidden navigation is only an extra UI restriction, never access control.
- If a staff member is disabled in the PIN dropdown, check active status and
  whether their initial CRM password change is still outstanding.
- Do not share personal PINs in a group chat.

TESTING/ROLLBACK
- No migration or activation required.
- No attendance records, PINs or other database values are modified by install.
- If needed, restore original crm-ui-nav.php from backup.

PATCH VERSION: AFTER FASA 16 COMPACT UI + EXPRESS ATTENDANCE
