fix: tenant-config fixes, cashier/share/savings UI bugs, and menu-access hardcoding

- Add Balance Sheet report and disabled-features accounting config
- Point menu-access tenant header and env.js/environment.ts tenant identifier
  at env config instead of hardcoded 'default'/'lincpay' literals
- Surface the real backend error (not a generic "no reference id") when an
  OTP send fails in contact-otp-block
- Fix branch-day "₹null" display bug (null vs undefined) and add a guard
  blocking a branch's first-ever day open before cash denomination migration
- Dynamically size the denomination count input and block re-opening an
  already-open business day from Migrate Cash Denomination
- Lock the denomination-managed cash GL row in Migrate Opening Balances
  (read-only, with a link back to Migrate Cash Denomination)
- Remove duplicate Cancel/Submit action bars on the Share Product and
  Savings Account creation preview steps; align Previous into the same row
- Hide "Apply Collection" on a share account once its advance collection
  is already settled (further purchases go through Apply Additional Shares)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

src/app/platform-admin/menu-access/menu-access.component.ts

@@ -104,7 +104,8 @@ export class PlatformMenuAccessComponent {
       'X-Api-Key': this.apiKey,
       // Any real tenant satisfies the platform's tenant-resolution filter; the target tenant for
       // read/write is this header's own value, so it is set to whichever tenant is actually in play.
-      'Fineract-Platform-TenantId': tenantForFilter || this.selectedTenant || (this.tenants[0]?.identifier ?? 'default')
+      'Fineract-Platform-TenantId':
+        tenantForFilter || this.selectedTenant || this.tenants[0]?.identifier || environment.fineractPlatformTenantId
     };
   }
 
@@ -126,7 +127,9 @@ export class PlatformMenuAccessComponent {
     this.rememberKey();
     this.loadingTenants = true;
     try {
-      const res = await fetch(this.apiUrl('/tenant-menu-access/tenants'), { headers: this.headers('default') });
+      const res = await fetch(this.apiUrl('/tenant-menu-access/tenants'), {
+        headers: this.headers(environment.fineractPlatformTenantId)
+      });
       if (!res.ok) {
         throw new Error(
           res.status === 403 || res.status === 401 ? 'Invalid or inactive API key.' : `Server error (${res.status}).`