PosLayout.razor hardcoded navigation to /admin for the settings button and sidebar link, causing staff users to land on the admin page. Now uses AuthStateService.GetPortalUrl() for role-aware routing. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>