refactor(client-portal) : remove client portal feature entirely

- drop ClientPortal module, ClientTicket entity, ROLE_CLIENT and all couplings (Task, TaskDocument, User, Notification) back to an internal-only model

- migration drops client_ticket / user_allowed_projects / related FK columns and removes leftover external client accounts (would otherwise be promoted to ROLE_USER)

- remove client-portal frontend module, admin tickets tab, user portal section, portal nav item and portal/clientTicket i18n keys

- fix directory nav icon (invalid mdi:contact-multiple-outline -> mdi:card-account-details-outline)

- add 'make sync-permissions' target, wire it into install/db-reset and the prod deploy script

frontend/modules/project-management/components/TaskCard.vue

@@ -20,12 +20,6 @@
                         name="mdi:flag-variant"
                         class="h-3.5 w-3.5 text-red-600"
                     />
-                    <Icon
-                        v-if="task.clientTicket"
-                        name="heroicons:user-circle"
-                        class="h-3.5 w-3.5 text-primary-500"
-                        :title="$t('clientTicket.linkedTooltip', { number: formatTicketNumber(task.clientTicket.number) })"
-                    />
                 </div>
                 <h4 class="line-clamp-2 text-sm font-semibold text-neutral-900">{{ task.title }}</h4>
             </div>
@@ -109,7 +103,6 @@
 
 <script setup lang="ts">
 import type { Task } from '~/modules/project-management/services/dto/task'
-import { formatTicketNumber } from '~/modules/client-portal/utils/ticket'
 
 const props = withDefaults(defineProps<{
     task: Task

frontend/modules/project-management/components/TaskDocumentUpload.vue

@@ -50,14 +50,13 @@ import { useTaskDocumentService } from '~/modules/project-management/services/ta
 
 const props = defineProps<{
     taskId?: number
-    clientTicketId?: number
 }>()
 
 const emit = defineEmits<{
     uploaded: []
 }>()
 
-const { upload: uploadFile, uploadForClientTicket } = useTaskDocumentService()
+const { upload: uploadFile } = useTaskDocumentService()
 const toast = useToast()
 const { t } = useI18n()
 
@@ -112,8 +111,6 @@ async function processFiles(files: File[]) {
         try {
             if (props.taskId) {
                 await uploadFile(props.taskId, file)
-            } else if (props.clientTicketId) {
-                await uploadForClientTicket(props.clientTicketId, file)
             }
             state.uploading = false
             state.progress = 100

frontend/modules/project-management/components/TaskListItem.vue

@@ -28,12 +28,6 @@
                     name="mdi:flag-variant"
                     class="h-3.5 w-3.5 text-red-600"
                 />
-                <Icon
-                    v-if="task.clientTicket"
-                    name="heroicons:user-circle"
-                    class="h-3.5 w-3.5 text-primary-500"
-                    :title="$t('clientTicket.linkedTooltip', { number: formatTicketNumber(task.clientTicket.number) })"
-                />
             </div>
             <!-- Row 2: title -->
             <h4 class="mt-1 text-sm font-semibold text-neutral-900">{{ task.title }}</h4>
@@ -117,7 +111,6 @@
 
 <script setup lang="ts">
 import type { Task } from '~/modules/project-management/services/dto/task'
-import { formatTicketNumber } from '~/modules/client-portal/utils/ticket'
 
 const props = withDefaults(defineProps<{
     task: Task

frontend/modules/project-management/services/dto/task.ts

@@ -28,14 +28,6 @@ export type Task = {
     deadline: string | null
     syncToCalendar: boolean
     calendarSyncError: string | null
-    clientTicket: {
-        id: number
-        '@id'?: string
-        number: number
-        type: 'bug' | 'improvement' | 'other'
-        status: 'new' | 'in_progress' | 'done' | 'rejected'
-        title: string
-    } | null
     recurrence: {
         id: number
         '@id'?: string

frontend/modules/project-management/services/task-documents.ts

@@ -15,13 +15,6 @@ export function useTaskDocumentService() {
         return extractHydraMembers(data)
     }
 
-    async function getByClientTicket(clientTicketId: number): Promise<TaskDocument[]> {
-        const data = await api.get<HydraCollection<TaskDocument>>('/task_documents', {
-            clientTicket: `/api/client_tickets/${clientTicketId}`,
-        })
-        return extractHydraMembers(data)
-    }
-
     async function uploadWithRelation(relationField: string, relationIri: string, file: File): Promise<TaskDocument> {
         const formData = new FormData()
         formData.append('file', file)
@@ -38,10 +31,6 @@ export function useTaskDocumentService() {
         return uploadWithRelation('task', `/api/tasks/${taskId}`, file)
     }
 
-    async function uploadForClientTicket(clientTicketId: number, file: File): Promise<TaskDocument> {
-        return uploadWithRelation('clientTicket', `/api/client_tickets/${clientTicketId}`, file)
-    }
-
     async function linkShare(taskId: number, sharePath: string): Promise<TaskDocument> {
         return $fetch<TaskDocument>(`${baseURL}/task_documents`, {
             method: 'POST',
@@ -69,5 +58,5 @@ export function useTaskDocumentService() {
         return response.text()
     }
 
-    return { getByTask, getByClientTicket, upload, uploadForClientTicket, linkShare, remove, getDownloadUrl, getContent }
+    return { getByTask, upload, linkShare, remove, getDownloadUrl, getContent }
 }