Fix OTP/SMS, ledger accounting, order tracking, and add reviews app

- Add MessageTemplate.runtime_field_labels so mobile's per-field
  execution-time labels are actually persisted (were silently dropped)
- Fix AdvanceOrderStageView reading the wrong extra-input key, and be
  honest about SMS send failures instead of always claiming success
- Add admin gift-gem SMS notification via Kavenegar
- Post real double-entry Transactions for plain (non-invoice) ledger
  entries so trial balance, the معین screen, and CSV/XLSX exports
  actually include everyday income/expense entries; backfill existing
  historical entries via data migration
- Rewrite CSV ledger export to produce an actual دفتر معین structure
  (per-account running balance) instead of a flat row dump
- Add invoice percent/promotional discounts, tax presets, ledger
  discount-percent handling, product SKU/category/expiry fields, and
  manual ledger-book archiving (replacing auto-archive on new book)
- Add reviews app (models, API, admin) for the comments/reviews feature
- Update tests for the above; fix two stale assertions left over from
  earlier work in this branch (معین sheet name, book auto-close)

apps/orders/api/views.py

@@ -5,7 +5,7 @@ from rest_framework.response import Response
 from rest_framework.views import APIView
 
 from apps.billing.permissions import HasActiveFeature
-from apps.orders.api.services import OrderStageService
+from apps.orders.api.services import OrderStageService, generate_tracking_code
 from apps.orders.models import Order, OrderStage, OrderStageLog
 
 from .serializers import OrderSerializer, OrderStageLogSerializer, OrderStageSerializer
@@ -34,6 +34,10 @@ class OrderStageListCreateView(_UserScopedListCreateView):
     model = OrderStage
     serializer_class = OrderStageSerializer
 
+    def get_queryset(self):
+        OrderStageService.ensure_default_stage(self.request.user)
+        return super().get_queryset()
+
 
 class OrderStageDetailView(_UserScopedDetailView):
     model = OrderStage
@@ -44,6 +48,12 @@ class OrderListCreateView(_UserScopedListCreateView):
     model = Order
     serializer_class = OrderSerializer
 
+    def perform_create(self, serializer):
+        serializer.save(
+            user=self.request.user,
+            tracking_code=serializer.validated_data.get("tracking_code") or generate_tracking_code(),
+        )
+
 
 class OrderDetailView(_UserScopedDetailView):
     model = Order
@@ -62,12 +72,31 @@ class AdvanceOrderStageView(APIView):
             raise NotFound("سفارش یافت نشد.")
         extra_input_value = request.data.get("extra_input_value", "")
         try:
-            order = OrderStageService.advance(request.user, pk, extra_input_value)
+            order, message_sent = OrderStageService.advance(request.user, pk, extra_input_value)
         except Order.DoesNotExist:
             raise NotFound("سفارش یافت نشد.")
         except ValueError as exc:
             raise ValidationError(str(exc))
-        return Response(OrderSerializer(order).data, status=status.HTTP_200_OK)
+        return Response(
+            {**OrderSerializer(order).data, "message_sent": message_sent},
+            status=status.HTTP_200_OK,
+        )
+
+
+class GenerateOrderTrackingCodeView(APIView):
+    """یک کدِ پیگیریِ تازه برای سفارش می‌سازد — برای وقتی هنوز کدِ واقعیِ
+    پستی را نداری ولی می‌خواهی از همین حالا یک مرجع به مشتری بدهی."""
+
+    permission_classes = [IsAuthenticated, HasActiveFeature]
+    feature_key = "orders"
+
+    def post(self, request, pk):
+        order = Order.objects.filter(pk=pk, user=request.user).first()
+        if order is None:
+            raise NotFound("سفارش یافت نشد.")
+        order.tracking_code = generate_tracking_code()
+        order.save(update_fields=["tracking_code", "updated_at"])
+        return Response(OrderSerializer(order).data)
 
 
 class OrderStageLogListView(generics.ListAPIView):