feat(absences) : avancement module absences + suppression du portail client

Deux lots regroupés sur la branche feat/absence-management.

Suppression complète du portail client :
- retire ROLE_CLIENT (security.yaml) ; User::getRoles() ajoute toujours ROLE_USER
- supprime l'entité ClientTicket (+ repo, states, relations), User.client et
  User.allowedProjects, NotificationService, ProjectAllowedExtension, le bloc
  ROLE_CLIENT de MailAccessChecker
- front : pages /portal, layout portal, composants client-ticket/,
  AdminClientTicketTab, services/dto/i18n/docs associés
- fixtures : retire les users client-liot / client-acme
- migration Version20260522110000 (drop client_ticket, user_allowed_projects,
  colonnes liées ; task_document.task_id -> NOT NULL)
- tests : retire les cas obsolètes testant le blocage des clients sur le mail

Module gestion des absences (WIP) :
- entités / migrations (Version20260521160000, Version20260522090000)
- pages absences.vue / team-absences.vue, composants frontend/components/absence/
- services front, AccrueLeaveCommand, PublicHolidayController

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

frontend/components/user/UserDrawer.vue

@@ -1,5 +1,8 @@
 <template>
-    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('users.editUser') : $t('users.addUser')">
+    <MalioDrawer v-model="isOpen">
+        <template #header>
+            <h2 class="text-xl font-bold">{{ isEditing ? $t('users.editUser') : $t('users.addUser') }}</h2>
+        </template>
         <form class="flex flex-col gap-2" @submit.prevent="handleSubmit">
             <MalioInputText
                 v-model="form.username"
@@ -35,37 +38,12 @@
                 </div>
             </div>
 
-            <div class="mt-4">
-                <MalioSelect
-                    v-model="form.clientId"
-                    label="Client"
-                    :options="clientOptions"
-                    placeholder="Aucun client"
-                    class="w-full"
-                    @update:model-value="onClientChange"
-                />
-            </div>
-
-            <div v-if="form.clientId !== null" class="mt-2">
-                <label class="text-sm font-semibold text-neutral-700">Projets autorisés</label>
-                <div class="mt-2 flex flex-col gap-2">
-                    <label
-                        v-for="project in filteredProjects"
-                        :key="project.id"
-                        class="flex items-center gap-2 text-sm text-neutral-700"
-                    >
-                        <input
-                            v-model="form.allowedProjectIds"
-                            type="checkbox"
-                            :value="project.id"
-                            class="rounded border-neutral-300"
-                        />
-                        {{ project.name }}
-                    </label>
-                    <span v-if="filteredProjects.length === 0" class="text-sm text-neutral-400">
-                        Aucun projet pour ce client.
-                    </span>
-                </div>
+            <!-- RH / Absences -->
+            <div class="mt-6 border-t border-neutral-200 pt-4">
+                <MalioCheckbox v-model="form.isEmployee" label="Employé (soumis à la gestion des absences)" />
+                <p v-if="form.isEmployee" class="mt-2 text-xs text-neutral-500">
+                    Les informations RH (contrat, dates, CP…) se gèrent dans Absences équipe → onglet Employés.
+                </p>
             </div>
 
             <div class="mt-6 flex justify-end">
@@ -83,12 +61,6 @@
 <script setup lang="ts">
 import type { UserData, UserWrite } from '~/services/dto/user-data'
 import { useUserService } from '~/services/users'
-import { useClientService } from '~/services/clients'
-import { useProjectService } from '~/services/projects'
-import type { Client } from '~/services/dto/client'
-import type { Project } from '~/services/dto/project'
-
-const { t } = useI18n()
 
 const props = defineProps<{
     modelValue: boolean
@@ -105,32 +77,16 @@ const isOpen = computed({
     set: (v) => emit('update:modelValue', v),
 })
 
-const availableRoles = ['ROLE_ADMIN', 'ROLE_USER', 'ROLE_CLIENT']
+const availableRoles = ['ROLE_ADMIN', 'ROLE_USER']
 
 const isEditing = computed(() => !!props.item)
 const isSubmitting = ref(false)
 
-const clients = ref<Client[]>([])
-const allProjects = ref<Project[]>([])
-
-const clientOptions = computed(() => [
-    { label: t('common.noClient'), value: null as number | null },
-    ...clients.value.map((c) => ({ label: c.name, value: c.id as number | null })),
-])
-
-const filteredProjects = computed(() => {
-    if (form.clientId === null) return []
-    return allProjects.value.filter(
-        (p) => p.client && typeof p.client === 'object' && 'id' in p.client && p.client.id === form.clientId,
-    )
-})
-
 const form = reactive({
     username: '',
     password: '',
     roles: [] as string[],
-    clientId: null as number | null,
-    allowedProjectIds: [] as number[],
+    isEmployee: false,
 })
 
 const touched = reactive({
@@ -138,45 +94,21 @@ const touched = reactive({
     password: false,
 })
 
-function onClientChange(value: number | null) {
-    form.clientId = value
-    form.allowedProjectIds = []
-    if (value !== null && !form.roles.includes('ROLE_CLIENT')) {
-        form.roles = [...form.roles.filter((r) => r !== 'ROLE_USER'), 'ROLE_CLIENT']
-    }
-}
-
-watch(() => form.roles, (roles) => {
-    if (!roles.includes('ROLE_CLIENT')) {
-        form.clientId = null
-        form.allowedProjectIds = []
-    }
-})
-
-watch(() => props.modelValue, async (open) => {
+watch(() => props.modelValue, (open) => {
     if (open) {
         if (props.item) {
             form.username = props.item.username ?? ''
             form.password = ''
             form.roles = [...props.item.roles]
-            form.clientId = props.item.client?.id ?? null
-            form.allowedProjectIds = props.item.allowedProjects?.map((p) => p.id) ?? []
+            form.isEmployee = props.item.isEmployee ?? false
         } else {
             form.username = ''
             form.password = ''
             form.roles = ['ROLE_USER']
-            form.clientId = null
-            form.allowedProjectIds = []
+            form.isEmployee = false
         }
         touched.username = false
         touched.password = false
-
-        const [loadedClients, loadedProjects] = await Promise.all([
-            useClientService().getAll(),
-            useProjectService().getAll({ archived: false }),
-        ])
-        clients.value = loadedClients
-        allProjects.value = loadedProjects
     }
 })
 
@@ -193,10 +125,7 @@ async function handleSubmit() {
         const payload: UserWrite = {
             username: form.username.trim(),
             roles: form.roles,
-            client: form.clientId !== null ? `/api/clients/${form.clientId}` : null,
-            allowedProjects: form.clientId !== null
-                ? form.allowedProjectIds.map((id) => `/api/projects/${id}`)
-                : [],
+            isEmployee: form.isEmployee,
         }
         if (form.password) {
             payload.plainPassword = form.password