refactor(client-portal) : remove client portal feature entirely

- drop ClientPortal module, ClientTicket entity, ROLE_CLIENT and all couplings (Task, TaskDocument, User, Notification) back to an internal-only model

- migration drops client_ticket / user_allowed_projects / related FK columns and removes leftover external client accounts (would otherwise be promoted to ROLE_USER)

- remove client-portal frontend module, admin tickets tab, user portal section, portal nav item and portal/clientTicket i18n keys

- fix directory nav icon (invalid mdi:contact-multiple-outline -> mdi:card-account-details-outline)

- add 'make sync-permissions' target, wire it into install/db-reset and the prod deploy script

tests/Unit/Shared/Doctrine/TimestampableBlamableSubscriberTest.php

@@ -6,14 +6,11 @@ namespace App\Tests\Unit\Shared\Doctrine;
 
 use App\Shared\Application\CurrentUserProviderInterface;
 use App\Shared\Domain\Contract\BlamableInterface;
-use App\Shared\Domain\Contract\ClientInterface;
 use App\Shared\Domain\Contract\TimestampableInterface;
 use App\Shared\Domain\Contract\UserInterface;
 use App\Shared\Domain\Trait\TimestampableBlamableTrait;
 use App\Shared\Infrastructure\Doctrine\TimestampableBlamableSubscriber;
 use DateTimeImmutable;
-use Doctrine\Common\Collections\ArrayCollection;
-use Doctrine\Common\Collections\Collection;
 use PHPUnit\Framework\TestCase;
 use stdClass;
 
@@ -123,16 +120,6 @@ final class TimestampableBlamableSubscriberTest extends TestCase
             {
                 return [];
             }
-
-            public function getClient(): ?ClientInterface
-            {
-                return null;
-            }
-
-            public function getAllowedProjects(): Collection
-            {
-                return new ArrayCollection();
-            }
         };
     }