Let parents register once and book for their children

A parent registers once and manages lessons for one or more children, who
need no login of their own. A child is a real wp_users row with the student
role but no usable login — so student_id keeps meaning "a WordPress user"
on every table, and booking, credits, policies and enrolments work unchanged.
A us_guardians link table maps guardian to child.

The signup form gains a parent/guardian tick that reveals a block per child,
with the account-signup questions asked per child rather than per guardian
— they describe the student, not the account holder. Signup policies are
recorded once per child with the guardian as the acceptor, which is the
record that actually means something. A family that half-creates is rolled
back entirely rather than leaving a guardian who cannot re-register.

The booking and enrolment forms gain a "Who is this for?" picker listing
children first, so the default selection is never the parent — booking for
the wrong child is correctable, quietly billing a parent for their kid's
lesson is not. POST /bookings and POST /enrollments take an optional
student_id honoured only for that child's guardian; anything else is a 403.
That check is the authorisation boundary of the feature.

Payments and credits gain a payer: the charge names the child it was for and
the guardian who owes it, so per-child reporting is unchanged while notices,
receipts and the payment step reach the parent. Credit is held by the payer,
so one child's cancellation can settle a sibling's charge, and the daily
billing scan sends a guardian one notice covering every child.

Closes #132

Co-Authored-By: Claude Opus 5 <[email protected]>

tests/Unit/ShortcodeRegistrarTest.php

@@ -10,6 +10,7 @@ use Unsupervised\Schedular\Auth\LoginPage;
 use Unsupervised\Schedular\Auth\RegistrationPage;
 use Unsupervised\Schedular\Booking\BookingPage;
 use Unsupervised\Schedular\GroupClass\GroupClassPage;
+use Unsupervised\Schedular\Guardian\FamilyPage;
 use Unsupervised\Schedular\ShortcodeRegistrar;
 
 class ShortcodeRegistrarTest extends TestCase
@@ -18,6 +19,7 @@ class ShortcodeRegistrarTest extends TestCase
     private LoginPage&Mockery\MockInterface $loginPage;
     private RegistrationPage&Mockery\MockInterface $registrationPage;
     private GroupClassPage&Mockery\MockInterface $groupClassPage;
+    private FamilyPage&Mockery\MockInterface $familyPage;
     private ShortcodeRegistrar $registrar;
 
     /** @var array<string, callable> */
@@ -34,12 +36,14 @@ class ShortcodeRegistrarTest extends TestCase
         $this->loginPage        = Mockery::mock(LoginPage::class);
         $this->registrationPage = Mockery::mock(RegistrationPage::class);
         $this->groupClassPage   = Mockery::mock(GroupClassPage::class);
+        $this->familyPage       = Mockery::mock(FamilyPage::class);
 
         $this->registrar = new ShortcodeRegistrar(
             $this->bookingPage,
             $this->loginPage,
             $this->registrationPage,
             $this->groupClassPage,
+            $this->familyPage,
         );
 
         $shortcodes = &$this->shortcodes;
@@ -50,7 +54,7 @@ class ShortcodeRegistrarTest extends TestCase
         );
     }
 
-    public function testRegisterAddsAllFourShortcodesAndHooks(): void
+    public function testRegisterAddsAllShortcodesAndHooks(): void
     {
         Actions\expectAdded('template_redirect')
             ->once()
@@ -62,7 +66,7 @@ class ShortcodeRegistrarTest extends TestCase
         $this->registrar->register();
 
         self::assertSame(
-            ['us_booking', 'us_student_login', 'us_student_register', 'us_group_classes'],
+            ['us_booking', 'us_student_login', 'us_student_register', 'us_group_classes', 'us_family'],
             array_keys($this->shortcodes)
         );
     }
@@ -97,8 +101,8 @@ class ShortcodeRegistrarTest extends TestCase
         $scripts = $this->captureEnqueuedAssets();
 
         self::assertSame(['us-scheduler-payment'], $scripts['us-scheduler-pricing']);
-        self::assertSame(['us-scheduler-pricing'], $scripts['us-scheduler']);
-        self::assertSame(['us-scheduler-pricing'], $scripts['us-scheduler-group']);
+        self::assertSame(['us-scheduler-pricing', 'us-scheduler-guardian'], $scripts['us-scheduler']);
+        self::assertSame(['us-scheduler-pricing', 'us-scheduler-guardian'], $scripts['us-scheduler-group']);
     }
 
     /**