Mock backend + demo UI

Try the QR attendance day before the real backend exists.

This route uses Next.js mock APIs, an in-memory roster, and a visible notification log so HCV can validate the field workflow without live payroll, SMS, passkey, or SCF integrations.