[Attendance] Have toggle to disallow check in if user is not within Geofence

Added a new Attendance setting that lets administrators require users to be within the configured geofence before checking in. When enabled, out-of-geofence check-ins are blocked across supported attendance workflows.