feat(absences) : avancement module absences + suppression du portail client

Deux lots regroupés sur la branche feat/absence-management.

Suppression complète du portail client :
- retire ROLE_CLIENT (security.yaml) ; User::getRoles() ajoute toujours ROLE_USER
- supprime l'entité ClientTicket (+ repo, states, relations), User.client et
  User.allowedProjects, NotificationService, ProjectAllowedExtension, le bloc
  ROLE_CLIENT de MailAccessChecker
- front : pages /portal, layout portal, composants client-ticket/,
  AdminClientTicketTab, services/dto/i18n/docs associés
- fixtures : retire les users client-liot / client-acme
- migration Version20260522110000 (drop client_ticket, user_allowed_projects,
  colonnes liées ; task_document.task_id -> NOT NULL)
- tests : retire les cas obsolètes testant le blocage des clients sur le mail

Module gestion des absences (WIP) :
- entités / migrations (Version20260521160000, Version20260522090000)
- pages absences.vue / team-absences.vue, composants frontend/components/absence/
- services front, AccrueLeaveCommand, PublicHolidayController

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/Mcp/Tool/TimeEntry/CreateTimeEntryTool.php

@@ -6,7 +6,6 @@ namespace App\Mcp\Tool\TimeEntry;
 
 use App\Entity\TimeEntry;
 use App\Mcp\Tool\Serializer;
-use App\Repository\ClientTicketRepository;
 use App\Repository\ProjectRepository;
 use App\Repository\TaskRepository;
 use App\Repository\TaskTagRepository;
@@ -31,7 +30,6 @@ class CreateTimeEntryTool
         private readonly TaskRepository $taskRepository,
         private readonly TaskTagRepository $taskTagRepository,
         private readonly TimeEntryRepository $timeEntryRepository,
-        private readonly ClientTicketRepository $clientTicketRepository,
         private readonly Security $security,
     ) {}
 
@@ -44,7 +42,6 @@ class CreateTimeEntryTool
         ?int $taskId = null,
         ?array $tagIds = null,
         ?string $description = null,
-        ?int $clientTicketId = null,
     ): string {
         if (!$this->security->isGranted('ROLE_USER')) {
             throw new AccessDeniedException('Access denied: ROLE_USER required.');
@@ -90,13 +87,6 @@ class CreateTimeEntryTool
             }
             $entry->setTask($task);
         }
-        if (null !== $clientTicketId) {
-            $clientTicket = $this->clientTicketRepository->find($clientTicketId);
-            if (null === $clientTicket) {
-                throw new InvalidArgumentException(sprintf('ClientTicket with ID %d not found.', $clientTicketId));
-            }
-            $entry->setClientTicket($clientTicket);
-        }
         if (null !== $tagIds) {
             foreach ($tagIds as $tagId) {
                 $tag = $this->taskTagRepository->find($tagId);

src/Mcp/Tool/TimeEntry/ListTimeEntriesTool.php

@@ -23,7 +23,6 @@ class ListTimeEntriesTool
         ?int $userId = null,
         ?int $projectId = null,
         ?int $taskId = null,
-        ?int $clientTicketId = null,
         ?string $startDate = null,
         ?string $endDate = null,
         int $limit = 100,
@@ -39,7 +38,6 @@ class ListTimeEntriesTool
             ->leftJoin('te.project', 'p')->addSelect('p')
             ->leftJoin('te.task', 't')->addSelect('t')
             ->leftJoin('te.tags', 'tg')->addSelect('tg')
-            ->leftJoin('te.clientTicket', 'ct')->addSelect('ct')
             ->orderBy('te.startedAt', 'DESC')
             ->setMaxResults($limit)
         ;
@@ -53,9 +51,6 @@ class ListTimeEntriesTool
         if (null !== $taskId) {
             $qb->andWhere('t.id = :taskId')->setParameter('taskId', $taskId);
         }
-        if (null !== $clientTicketId) {
-            $qb->andWhere('ct.id = :clientTicketId')->setParameter('clientTicketId', $clientTicketId);
-        }
         if (null !== $startDate) {
             $qb->andWhere('te.startedAt >= :startDate')
                 ->setParameter('startDate', new DateTimeImmutable($startDate.' 00:00:00'))

src/Mcp/Tool/TimeEntry/UpdateTimeEntryTool.php

@@ -5,7 +5,6 @@ declare(strict_types=1);
 namespace App\Mcp\Tool\TimeEntry;
 
 use App\Mcp\Tool\Serializer;
-use App\Repository\ClientTicketRepository;
 use App\Repository\ProjectRepository;
 use App\Repository\TaskRepository;
 use App\Repository\TaskTagRepository;
@@ -27,7 +26,6 @@ class UpdateTimeEntryTool
         private readonly ProjectRepository $projectRepository,
         private readonly TaskRepository $taskRepository,
         private readonly TaskTagRepository $taskTagRepository,
-        private readonly ClientTicketRepository $clientTicketRepository,
         private readonly EntityManagerInterface $entityManager,
         private readonly Security $security,
     ) {}
@@ -41,7 +39,6 @@ class UpdateTimeEntryTool
         ?int $taskId = null,
         ?array $tagIds = null,
         ?string $description = null,
-        ?int $clientTicketId = null,
     ): string {
         if (!$this->security->isGranted('ROLE_USER')) {
             throw new AccessDeniedException('Access denied: ROLE_USER required.');
@@ -79,13 +76,6 @@ class UpdateTimeEntryTool
             }
             $entry->setTask($task);
         }
-        if (null !== $clientTicketId) {
-            $clientTicket = $this->clientTicketRepository->find($clientTicketId);
-            if (null === $clientTicket) {
-                throw new InvalidArgumentException(sprintf('ClientTicket with ID %d not found.', $clientTicketId));
-            }
-            $entry->setClientTicket($clientTicket);
-        }
         if (null !== $tagIds) {
             foreach ($entry->getTags()->toArray() as $existingTag) {
                 $entry->removeTag($existingTag);