admin-insights-pages: dashboard customers+revenue (orders.amount), users->tags relation, pause customer (gates alerts), About/What-is-this/Contact pages

frontend/internal/handlers/scan.go

@@ -98,6 +98,13 @@ func (a *App) shouldAlert(ctx context.Context, tag db.Tag, scan db.Scan, hasLoc
 		return false
 	}
 
+	// Customer pause (admin kill-switch): paused owner -> record only.
+	if tag.OwnerID.Valid {
+		if owner, err := a.Queries.GetUserByID(ctx, tag.OwnerID.Int64); err == nil && owner.Paused {
+			return false
+		}
+	}
+
 	// 24 h per-device block: same fingerprint seen recently (excluding this scan) => record only.
 	if fp := scan.Fingerprint.String; fp != "" {
 		if _, err := a.Queries.GetRecentScanByFingerprint(ctx, db.GetRecentScanByFingerprintParams{Fingerprint: pgtype.Text{String: fp, Valid: true}, ID: scan.ID}); err == nil {
@@ -279,6 +286,12 @@ func (a *App) FinderContact(w http.ResponseWriter, r *http.Request) {
 	// Should we notify? Skip when the same phone was alerted within the window,
 	// or when this device (fingerprint) has already alerted in the last 24 h.
 	notify := tag.SmsEnabled && tag.Phone.Valid && a.Sender != nil
+	// Customer pause: paused owner -> store only.
+	if notify && tag.OwnerID.Valid {
+		if owner, err := a.Queries.GetUserByID(r.Context(), tag.OwnerID.Int64); err == nil && owner.Paused {
+			notify = false
+		}
+	}
 	// Metering: metered tags must have credits remaining.
 	if notify && tag.SmsAllocated > 0 && tag.SmsUsed >= tag.SmsAllocated {
 		notify = false