release: OpenClockwork 1.3.0

[patrickschiller]

Summary

• adds opt-in clock-in and clock-out locations to the admin working-time report and CSV export
• persists terminal location labels for stable historical reporting
• updates README, FEATURES, upgrade and release documentation
• prepares all version metadata and generated API artifacts for OpenClockwork 1.3.0

Migration and compatibility

• adds the forward-only migration 20260901120000_working_time_report_locations
• employee and request endpoints now require JWT bearer authentication and derive identities from the token
• location data remains excluded unless an HR user explicitly enables it

Verification

• focused API and web tests pass
• OpenAPI generation and generated-client checks pass
• Prisma migration was tested against an upgraded PostgreSQL database
• release metadata verifies successfully for v1.3.0

All commits include DCO sign-off.

[patrickschiller]

GitHub kept this pull request on the previous head commit after the release-preparation push. Closing and reopening once to refresh the pull-request ref; no code is being discarded.