1. Fix Yoco payment amount calculation: order->total already includes
shipping_fee, so don't add it again. Was charging 2x shipping.
2. Add authorization gate for ops staff access: users with is_admin=true
can now access the ops page by scanning QR codes.