feat: Add photo galleries to services, resource types management, and UI improvements

Major features:
- Add drag-and-drop photo gallery to Service create/edit modals
- Add Resource Types management section to Settings (CRUD for custom types)
- Add edit icon consistency to Resources table (pencil icon in actions)
- Improve Services page with drag-to-reorder and customer preview mockup

Backend changes:
- Add photos JSONField to Service model with migration
- Add ResourceType model with category (STAFF/OTHER), description fields
- Add ResourceTypeViewSet with CRUD operations
- Add service reorder endpoint for display order

Frontend changes:
- Services page: two-column layout, drag-reorder, photo upload
- Settings page: Resource Types tab with full CRUD modal
- Resources page: Edit icon in actions column instead of row click
- Sidebar: Payments link visibility based on role and paymentsEnabled
- Update types.ts with Service.photos and ResourceTypeDefinition

Note: Removed photos from ResourceType (kept only for Service)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

smoothschedule/config/urls.py

@@ -10,8 +10,11 @@ from drf_spectacular.views import SpectacularAPIView
 from drf_spectacular.views import SpectacularSwaggerView
 from rest_framework.authtoken.views import obtain_auth_token
 
-from smoothschedule.users.api_views import current_user_view, logout_view, send_verification_email, verify_email
-from schedule.api_views import current_business_view
+from smoothschedule.users.api_views import (
+    current_user_view, logout_view, send_verification_email, verify_email,
+    hijack_acquire_view, hijack_release_view
+)
+from schedule.api_views import current_business_view, update_business_view
 
 urlpatterns = [
     # Django Admin, use {% url 'admin:index' %}
@@ -19,6 +22,8 @@ urlpatterns = [
     # User management
     path("users/", include("smoothschedule.users.urls", namespace="users")),
     path("accounts/", include("allauth.urls")),
+    # Django Hijack (masquerade) - for admin interface
+    path("hijack/", include("hijack.urls")),
     # Your stuff: custom urls includes go here
     # ...
     # Media files
@@ -39,8 +44,12 @@ urlpatterns += [
     path("api/auth/logout/", logout_view, name="logout"),
     path("api/auth/email/verify/send/", send_verification_email, name="send_verification_email"),
     path("api/auth/email/verify/", verify_email, name="verify_email"),
+    # Hijack (masquerade) API
+    path("api/auth/hijack/acquire/", hijack_acquire_view, name="hijack_acquire"),
+    path("api/auth/hijack/release/", hijack_release_view, name="hijack_release"),
     # Business API
     path("api/business/current/", current_business_view, name="current_business"),
+    path("api/business/current/update/", update_business_view, name="update_business"),
     # API Docs
     path("api/schema/", SpectacularAPIView.as_view(), name="api-schema"),
     path(