When switching companies in a Frontdesk station and opening the kiosk URL, the company logo does not appear.

**Steps to produce:**
- Install the `frontdesk` module.
- Ensure the database has at least two companies, each with a logo configured.
- `Enable multi-company` access (user has access to all companies).
- Open any Frontdesk station configuration and change the company to one different from the currently active company.
- Copy the kiosk URL and open it in an incognito/private window.
- The kiosk opens, but the company logo is missing.

**Issue:**
- Company logo not comes on frontdesk kiosk.

**Root cause:**
- When the kiosk URL is accessed, Odoo logs an `Access Denied by record rules`.
- This happens because the selected company on the station is not included in the `Public User’s companies`.
- As a result, the public user cannot read the company record, so the logo does not load.

**Solution:**
- Added an `onchange` on `company_id` to automatically include the selected
 company in the Public User’s `company_ids` if it is not already present.
- This ensures the kiosk always has access to correct company record and logo.
- Also added an XML-side fix to prevent an access error that occurs when
  a company is not activated and we attempt to select it in the company field.

**Before:**
<img width="500" height="500" alt="frontdesk_image_before" src="https://github.com/user-attachments/assets/b002ac6e-5271-4561-bf03-542a3feeefd1" />

**After:**
<img width="500" height="500" alt="frondesk_image_after" src="https://github.com/user-attachments/assets/7b5bffe4-ccbf-48f5-ad9c-d5e6d2e7678e" />

**opw-5138980**

Forward-Port-Of: odoo/enterprise#100300

In the Accounting app (with the *Spain - Veri\*factu* module installed), when a user who is **not** part of the *Accounting / Invoicing* (`account.group_account_invoice`) group would be blocked by an Access Error when trying to open an invoice. Among the Accounting groups, only  *Accounting / Read-only* does not inherit from *Accounting / Invoicing*, which means that only the users in *Accounting / Read-only* could not access the invoices.

By granting read rights to both *Accounting / Invoicing* and *Accounting / Read-only*, we ensure that any user belonging to an Accounting group can see the invoices from the Veri\*factu module.

### Steps to reproduce:
1. Install *Accounting* (`accountant`) and *Spain - Veri\*Factu* (`l10n_es_edi_verifactu`).
2. Go to Settings > Users & Companies > Users and select a user.
3. In the *Access Rights* tab, set the user's *Accounting* access right to *"Read-only"*.
4. Log out, then log back in as the user selected in step 2.
5. Go to Accounting > Customers > Invoices and select any invoice.
6. An access error pops up.

opw-5343391

Forward-Port-Of: odoo/odoo#238914
Forward-Port-Of: odoo/odoo#238291