Add customergroup and entity HTTP APIs with address and contact routes.

Expose store-backed CRUD for customer groups, entities, nested addresses, and contacts, matching the documented dashdbschema contracts.

docs/api/routes/customergroup/create.md

@@ -0,0 +1,41 @@
+# `POST /customergroup`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Create customer group
+
+Creates a customer group for the selected company.
+
+## Body (JSON)
+
+```json
+{
+  "name": "Kunden"
+}
+```
+
+## Response `201`
+
+Created customer group
+
+```json
+{
+  "customergroup": {
+    "id": 1,
+    "name": "…"
+  }
+}
+```
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | Name required or no company selected — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Company not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._

docs/api/routes/customergroup/delete.md

@@ -0,0 +1,35 @@
+# `DELETE /customergroup/{id}`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Delete customer group
+
+Deletes the customer group (cascades entities). Fails with
+`Customer group in use` for the POS group or other NO ACTION references.
+
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `id` | yes | integer |  |
+
+## Response `204`
+
+Deleted
+
+_No content_
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | No company selected or invalid id — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Customer group not found — `{"error":"…"}` |
+| 409 | Customer group in use — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._

docs/api/routes/customergroup/list.md

@@ -0,0 +1,35 @@
+# `GET /customergroup`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+List customer groups
+
+Lists customer groups for the authenticated user's selected company.
+
+## Response `200`
+
+Customer group list
+
+```json
+{
+  "customergroups": [
+    {
+      "id": 1,
+      "name": "…"
+    }
+  ]
+}
+```
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | No company selected — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Company not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._

docs/api/routes/customergroup/update.md

@@ -0,0 +1,47 @@
+# `PATCH /customergroup/{id}`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Update customer group
+
+Renames a customer group for the selected company.
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `id` | yes | integer |  |
+
+## Body (JSON)
+
+```json
+{
+  "name": "Stammkunden"
+}
+```
+
+## Response `200`
+
+Updated customer group
+
+```json
+{
+  "customergroup": {
+    "id": 1,
+    "name": "…"
+  }
+}
+```
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | Name required, invalid id, or no company selected — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Customer group or company not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._