refactor(client-portal) : remove client portal feature entirely

- drop ClientPortal module, ClientTicket entity, ROLE_CLIENT and all couplings (Task, TaskDocument, User, Notification) back to an internal-only model

- migration drops client_ticket / user_allowed_projects / related FK columns and removes leftover external client accounts (would otherwise be promoted to ROLE_USER)

- remove client-portal frontend module, admin tickets tab, user portal section, portal nav item and portal/clientTicket i18n keys

- fix directory nav icon (invalid mdi:contact-multiple-outline -> mdi:card-account-details-outline)

- add 'make sync-permissions' target, wire it into install/db-reset and the prod deploy script

frontend/modules/project-management/components/TaskDocumentUpload.vue

@@ -50,14 +50,13 @@ import { useTaskDocumentService } from '~/modules/project-management/services/ta
 
 const props = defineProps<{
     taskId?: number
-    clientTicketId?: number
 }>()
 
 const emit = defineEmits<{
     uploaded: []
 }>()
 
-const { upload: uploadFile, uploadForClientTicket } = useTaskDocumentService()
+const { upload: uploadFile } = useTaskDocumentService()
 const toast = useToast()
 const { t } = useI18n()
 
@@ -112,8 +111,6 @@ async function processFiles(files: File[]) {
         try {
             if (props.taskId) {
                 await uploadFile(props.taskId, file)
-            } else if (props.clientTicketId) {
-                await uploadForClientTicket(props.clientTicketId, file)
             }
             state.uploading = false
             state.progress = 100