fix(auth): enforce payment permission eligibility in pre-verified order status completion #1207

Description

In PATCH /api/orders/:id/status, completing an unpaid order requires the approver to possess both orders.status.update and payments.take.
In PR #1197, asynchronous pre-verification only checked orders.status.update. When multiple managers share a PIN (or in fallback scanning), pre-verification can stop at a manager lacking payments.take. The subsequent transaction revalidation then rejects the approver with 403 Invalid manager PIN, skipping any subsequent managers with matching PINs who hold the required permission.

Expected Behavior

• Pre-verification candidate filtering must enforce the exact same eligibility rules as transaction revalidation (including payments.take when completing unpaid orders).
• Maintain manager selection binding when explicit approver ID is provided.