feat: complete fase 1 - all controllers, services, middleware

- Added Ejecutivo.cs entity
- ArqueoService + ArqueoController (arqueos por fecha/usuario)
- 13 missing controllers: Curso, Descuento, Documento, Empresa, Horario,
  Jornada, Programa, Propuesta, Region, Sala, Sede, Tarifa, Usuario
- JwtMiddleware.cs for cookie/token validation
- SpComplexQueries.cs for Dapper multi-resultset
- ArqueoService registered in DI
- Build: 0 errors
- Total: 21 controllers, 8 services, 7 repos, 21 entities

backend/src/Ventas.API/Controllers/ProgramaController.cs

@@ -0,0 +1,26 @@
+using Dapper;
+using Npgsql;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+
+namespace Ventas.API.Controllers;
+
+[ApiController]
+[Route("api/[controller]")]
+[Authorize]
+public class ProgramaController : ControllerBase
+{
+    private readonly string _connectionString;
+
+    public ProgramaController(IConfiguration configuration) => _connectionString = configuration.GetConnectionString("Default")!;
+
+    [HttpGet]
+    public async Task<IActionResult> Buscar([FromQuery] string tipoBusqueda, [FromQuery] string nombre)
+    {
+        using var connection = new NpgsqlConnection(_connectionString);
+        var rows = await connection.QueryAsync("sige_sam_v3.BuscarProgramas",
+            new { tipobusqueda = tipoBusqueda, nombreprograma = nombre },
+            commandType: System.Data.CommandType.StoredProcedure);
+        return Ok(rows.Select(r => (Dictionary<string, object>)(IDictionary<string, object>)r!));
+    }
+}