Passes and validations

**Passes** are recurring or long-term entitlements: monthly employee parking, annual resident passes, semester student passes.

Pass types (Passes tab):
- Monthly Recurring — auto-renews via Stripe
- Annual Prepaid — one-time charge
- Employer-Sponsored — billed to an employer org, not the holder
- Token Bucket — a pool of hours that decrements per session

Each pass binds to one or more plates and optionally specific zones. At entry, the system recognizes the plate, sees the pass, and opens the gate without charging.

**Validations** are merchant discounts: a restaurant validates a 2-hour parking spot for diners, a hotel validates 24 hours for guests, an event organizer validates 4 hours for attendees.

To issue:
- Validations tab → "+ Issue validation" — pick the discount type, amount/hours, beneficiary (specific session or open code)
- Or the merchant uses their portal QR (auto-generated) to issue validations directly from their POS

Wally `parking_postValidation` issues from chat. Validations apply automatically at session close, reducing the charge before payment.