fix: tenant-config fixes, cashier/share/savings UI bugs, and menu-access hardcoding

- Add Balance Sheet report and disabled-features accounting config
- Point menu-access tenant header and env.js/environment.ts tenant identifier
  at env config instead of hardcoded 'default'/'lincpay' literals
- Surface the real backend error (not a generic "no reference id") when an
  OTP send fails in contact-otp-block
- Fix branch-day "₹null" display bug (null vs undefined) and add a guard
  blocking a branch's first-ever day open before cash denomination migration
- Dynamically size the denomination count input and block re-opening an
  already-open business day from Migrate Cash Denomination
- Lock the denomination-managed cash GL row in Migrate Opening Balances
  (read-only, with a link back to Migrate Cash Denomination)
- Remove duplicate Cancel/Submit action bars on the Share Product and
  Savings Account creation preview steps; align Previous into the same row
- Hide "Apply Collection" on a share account once its advance collection
  is already settled (further purchases go through Apply Additional Shares)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

src/app/cashier/transaction-entry/transaction-entry.component.ts

@@ -3189,7 +3189,7 @@ export class TransactionEntryComponent implements OnInit, OnDestroy {
     // Step 1: search on the correct endpoint for this account type
     this.http
       .get<any>(
-        `${cfg.list}?${cfg.listQueryParam}=${encodeURIComponent(acNo)}${cfg.supportsPagination ? `&offset=0&limit=${cfg.maxLimit}` : ''}`
+        `${cfg.list}?${cfg.listQueryParam}=${encodeURIComponent(acNo)}${cfg.supportsPagination ? `&offset=0&limit=${cfg.maxLimit}` : ''}${cfg.extraListQueryParams ? `&${cfg.extraListQueryParams}` : ''}`
       )
       .pipe(catchError(() => of(null)))
       .subscribe((res: any) => {
@@ -3278,6 +3278,10 @@ export class TransactionEntryComponent implements OnInit, OnDestroy {
     matchField: string;
     detailParams: string;
     supportsPagination: boolean;
+    /** Extra fixed query params (e.g. "usage=1") appended to every list-search request for this
+     *  account type — used to keep Header GL accounts out of the results a clerk/cashier can pick
+     *  for a transaction; a Header can never receive a posting, so it should never be offered. */
+    extraListQueryParams?: string;
   } {
     const t = acTyp?.toUpperCase();
     if (t === 'LA') {
@@ -3331,7 +3335,10 @@ export class TransactionEntryComponent implements OnInit, OnDestroy {
         listQueryParam: 'searchParam',
         matchField: 'glCode',
         detailParams: '?fetchRunningBalance=true',
-        supportsPagination: false
+        supportsPagination: false,
+        // Detail-only: a Header account is a pure grouping node and can never receive a
+        // transaction, so it must never be a selectable match here in the first place.
+        extraListQueryParams: 'usage=1'
       };
     }
     if (t === 'CA' || t === 'CB') {