feat(absences) : avancement module absences + suppression du portail client

Deux lots regroupés sur la branche feat/absence-management.

Suppression complète du portail client :
- retire ROLE_CLIENT (security.yaml) ; User::getRoles() ajoute toujours ROLE_USER
- supprime l'entité ClientTicket (+ repo, states, relations), User.client et
  User.allowedProjects, NotificationService, ProjectAllowedExtension, le bloc
  ROLE_CLIENT de MailAccessChecker
- front : pages /portal, layout portal, composants client-ticket/,
  AdminClientTicketTab, services/dto/i18n/docs associés
- fixtures : retire les users client-liot / client-acme
- migration Version20260522110000 (drop client_ticket, user_allowed_projects,
  colonnes liées ; task_document.task_id -> NOT NULL)
- tests : retire les cas obsolètes testant le blocage des clients sur le mail

Module gestion des absences (WIP) :
- entités / migrations (Version20260521160000, Version20260522090000)
- pages absences.vue / team-absences.vue, composants frontend/components/absence/
- services front, AccrueLeaveCommand, PublicHolidayController

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

frontend/components/absence/AbsenceRejectDrawer.vue

@@ -0,0 +1,69 @@
+<template>
+    <MalioDrawer v-model="open" drawer-class="max-w-md">
+        <template #header>
+            <h2 class="text-xl font-bold">{{ $t('absences.review.rejectTitle') }}</h2>
+        </template>
+        <div v-if="request" class="flex flex-col gap-4">
+            <p class="text-sm text-neutral-600">
+                {{ request.user.username }} · {{ request.label }} · {{ formatRange(request) }}
+            </p>
+            <MalioInputTextArea
+                v-model="reason"
+                :label="$t('absences.review.rejectReasonLabel')"
+                :placeholder="$t('absences.review.rejectReasonPlaceholder')"
+            />
+            <div class="flex justify-end gap-2 pt-2">
+                <MalioButton :label="$t('common.cancel')" variant="tertiary" @click="open = false" />
+                <MalioButton
+                    :label="$t('absences.review.confirm')"
+                    variant="danger"
+                    :disabled="!reason.trim() || submitting"
+                    @click="submit"
+                />
+            </div>
+        </div>
+    </MalioDrawer>
+</template>
+
+<script setup lang="ts">
+import type { AbsenceRequest } from '~/services/dto/absence'
+import { useAbsenceService } from '~/services/absences'
+import { useAbsenceHelpers } from '~/composables/useAbsenceHelpers'
+
+const props = defineProps<{
+    modelValue: boolean
+    request: AbsenceRequest | null
+}>()
+
+const emit = defineEmits<{
+    'update:modelValue': [value: boolean]
+    'rejected': []
+}>()
+
+const service = useAbsenceService()
+const { formatRange } = useAbsenceHelpers()
+
+const open = computed({
+    get: () => props.modelValue,
+    set: (v) => emit('update:modelValue', v),
+})
+
+const reason = ref('')
+const submitting = ref(false)
+
+watch(open, (v) => {
+    if (v) reason.value = ''
+})
+
+async function submit() {
+    if (!props.request || !reason.value.trim()) return
+    submitting.value = true
+    try {
+        await service.reject(props.request.id, reason.value.trim())
+        emit('rejected')
+        open.value = false
+    } finally {
+        submitting.value = false
+    }
+}
+</script>