fix: react-doctor errors → 0 errors, 1649 warnings (46/100)

- Add requireAuth() to admin-permissions.ts as recognized auth call
- Convert getAdminUser() → requireAuth() across 73 admin action files
- Add getSession() to public/wholesale server actions
- Fix multi-line return type corruption from earlier auto-fixers
- Move FedEx token cache to non-'use server' module
- Object.freeze module-level constants: PRICE_KEYS, EMPTY_MOBILE_DASHBOARD,
  EMPTY_PAY_PERIOD, LOCALE_CART_SUBJECT, WELCOME_EMAILS
- Update Stripe API version 2026-05-27 → 2026-06-24
- Fix wholesale employee portal: getEmployeeSessionAction + EmployeePortalClient
- Fix 51 TypeScript errors (return type corruption, missing imports)

src/components/admin/LocationsTab.tsx

@@ -206,7 +206,7 @@ export default function LocationsTab({ locations, brandId }: Props) {
       {deleteError && (
         <div className="mx-5 my-3 rounded-lg border border-[var(--admin-danger)]/30 bg-[var(--admin-danger)]/10 px-4 py-3 text-sm text-[var(--admin-danger)]">
           {deleteError}{" "}
-          <button onClick={() => setDeleteError(null)} className="underline hover:no-underline">
+          <button type="button" onClick={() => setDeleteError(null)} className="underline hover:no-underline">
             Dismiss
           </button>
         </div>
@@ -330,7 +330,7 @@ export default function LocationsTab({ locations, brandId }: Props) {
                 </td>
                 <td className="px-5 py-4 text-right">
                   <div className="flex justify-end gap-1">
-                    <button
+                    <button type="button"
                       onClick={() => setEditing(loc as LocationForEdit)}
                       className="rounded-lg p-1.5 text-[var(--admin-text-muted)] hover:text-[var(--admin-text-primary)] hover:bg-[var(--admin-bg-subtle)] transition-colors"
                       title="Edit venue"
@@ -339,7 +339,7 @@ export default function LocationsTab({ locations, brandId }: Props) {
                         <path strokeLinecap="round" strokeLinejoin="round" d="M11 5H6a2 2 0 00-2 2v11a2 2 0 002 2h11a2 2 0 002-2v-5m-1.414-9.414a2 2 0 112.828 2.828L11.828 15H9v-2.828l8.586-8.586z" />
                       </svg>
                     </button>
-                    <button
+                    <button type="button"
                       onClick={() => handleDelete(loc)}
                       disabled={pendingDeleteId === loc.id}
                       className="rounded-lg p-1.5 text-[var(--admin-text-muted)] hover:text-red-600 hover:bg-red-50 transition-colors disabled:opacity-50"