Consolidation pass: HR-only access, effective-dated mutations, data integrity guards, test suite

Reworks the app from a two-role (hr_admin/manager) model to a single
HR-only role gated by profiles.is_active, fixes transfer/promote/karenz/
reorg RPCs to actually defer future-dated changes via a new
pending_org_changes table instead of writing them immediately (applied
by a daily Vercel Cron route), makes reorg undo append-only instead of
deleting history, adds Karenz-return and history-date integrity guards,
deprecates the salary column, and adds explicit schema grants + perf
indexes needed to run against a fresh (non-hosted) Postgres instance.

Adds vitest unit + integration test suites (the latter against a real
local Supabase instance) covering all of the above, plus lint/typecheck/
build wiring (`npm run check`).

components/employees/EmployeeDetail.tsx

@@ -17,7 +17,7 @@ import { OrganisationTab } from "./tabs/OrganisationTab";
 import { StammdatenTab } from "./tabs/StammdatenTab";
 import { VertragTab } from "./tabs/VertragTab";
 
-type EmployeeRow = Database["public"]["Views"]["employees_directory"]["Row"];
+type EmployeeRow = Database["public"]["Tables"]["employees"]["Row"];
 type Division = Database["public"]["Tables"]["divisions"]["Row"];
 type Department = Database["public"]["Tables"]["departments"]["Row"];
 type Team = Database["public"]["Tables"]["teams"]["Row"];
@@ -36,14 +36,13 @@ type EmployeeDetailProps = {
   teams: Team[];
   locations: Location[];
   openPositions: OpenPosition[];
-  canEdit: boolean;
 };
 
 type PanelType = "transfer" | "promote" | "karenz" | "daten" | "terminate" | "rehire" | null;
-const TABS = ["Stammdaten", "Vertrag & Gehalt", "Organisation", "Historie"] as const;
+const TABS = ["Stammdaten", "Vertrag", "Organisation", "Historie"] as const;
 
 export function EmployeeDetail(props: EmployeeDetailProps) {
-  const { employee, manager, directReports, history, divisions, departments, teams, locations, canEdit } = props;
+  const { employee, manager, directReports, history, divisions, departments, teams, locations } = props;
   const [tab, setTab] = useState<(typeof TABS)[number]>("Stammdaten");
   const [panel, setPanel] = useState<PanelType>(null);
 
@@ -77,32 +76,30 @@ export function EmployeeDetail(props: EmployeeDetailProps) {
             </div>
           </div>
 
-          {canEdit && (
-            <div className="flex flex-wrap gap-2">
-              {isActive && (
-                <>
-                  <ActionButton icon={ArrowRightLeft} label="Versetzen" onClick={() => setPanel("transfer")} />
-                  <ActionButton icon={TrendingUp} label="Befördern" onClick={() => setPanel("promote")} />
-                  <ActionButton icon={Clock} label={employee.status === "Karenz" ? "Karenz verwalten" : "Karenz"} onClick={() => setPanel("karenz")} />
-                  <ActionButton icon={Pencil} label="Daten ändern" onClick={() => setPanel("daten")} />
-                  <button
-                    onClick={() => setPanel("terminate")}
-                    className="flex items-center gap-1.5 rounded border border-danger-solid px-3 py-1.5 text-sm font-semibold text-danger-solid hover:bg-danger-bg"
-                  >
-                    <XCircle className="h-4 w-4" /> Austritt
-                  </button>
-                </>
-              )}
-              {employee.status === "Ausgetreten" && (
+          <div className="flex flex-wrap gap-2">
+            {isActive && (
+              <>
+                <ActionButton icon={ArrowRightLeft} label="Versetzen" onClick={() => setPanel("transfer")} />
+                <ActionButton icon={TrendingUp} label="Befördern" onClick={() => setPanel("promote")} />
+                <ActionButton icon={Clock} label={employee.status === "Karenz" ? "Karenz verwalten" : "Karenz"} onClick={() => setPanel("karenz")} />
+                <ActionButton icon={Pencil} label="Daten ändern" onClick={() => setPanel("daten")} />
                 <button
-                  onClick={() => setPanel("rehire")}
-                  className="flex items-center gap-1.5 rounded bg-brand-500 px-3 py-1.5 text-sm font-semibold text-white hover:bg-brand-600"
+                  onClick={() => setPanel("terminate")}
+                  className="flex items-center gap-1.5 rounded border border-danger-solid px-3 py-1.5 text-sm font-semibold text-danger-solid hover:bg-danger-bg"
                 >
-                  <RotateCcw className="h-4 w-4" /> Wiedereinstellen
+                  <XCircle className="h-4 w-4" /> Austritt
                 </button>
-              )}
-            </div>
-          )}
+              </>
+            )}
+            {employee.status === "Ausgetreten" && (
+              <button
+                onClick={() => setPanel("rehire")}
+                className="flex items-center gap-1.5 rounded bg-brand-500 px-3 py-1.5 text-sm font-semibold text-white hover:bg-brand-600"
+              >
+                <RotateCcw className="h-4 w-4" /> Wiedereinstellen
+              </button>
+            )}
+          </div>
         </div>
       </div>
 
@@ -122,29 +119,25 @@ export function EmployeeDetail(props: EmployeeDetailProps) {
 
       <div className="rounded border border-border bg-white p-6">
         {tab === "Stammdaten" && <StammdatenTab employee={employee} location={location} />}
-        {tab === "Vertrag & Gehalt" && <VertragTab employee={employee} />}
+        {tab === "Vertrag" && <VertragTab employee={employee} />}
         {tab === "Organisation" && <OrganisationTab manager={manager} directReports={directReports} breadcrumb={breadcrumb} />}
         {tab === "Historie" && <HistorieTab history={history} />}
       </div>
 
-      {canEdit && (
-        <>
-          <TransferPanel
-            open={panel === "transfer"}
-            onClose={() => setPanel(null)}
-            employee={employee}
-            divisions={divisions}
-            departments={departments}
-            teams={teams}
-            currentTeamId={employee.team_id}
-          />
-          <PromotePanel open={panel === "promote"} onClose={() => setPanel(null)} employee={employee} />
-          <KarenzPanel open={panel === "karenz"} onClose={() => setPanel(null)} employee={employee} />
-          <DatenAendernPanel open={panel === "daten"} onClose={() => setPanel(null)} employee={employee} />
-          <TerminatePanel open={panel === "terminate"} onClose={() => setPanel(null)} employee={employee} directReportCount={directReports.length} />
-          <RehirePanel open={panel === "rehire"} onClose={() => setPanel(null)} employee={employee} />
-        </>
-      )}
+      <TransferPanel
+        open={panel === "transfer"}
+        onClose={() => setPanel(null)}
+        employee={employee}
+        divisions={divisions}
+        departments={departments}
+        teams={teams}
+        currentTeamId={employee.team_id}
+      />
+      <PromotePanel open={panel === "promote"} onClose={() => setPanel(null)} employee={employee} />
+      <KarenzPanel open={panel === "karenz"} onClose={() => setPanel(null)} employee={employee} />
+      <DatenAendernPanel open={panel === "daten"} onClose={() => setPanel(null)} employee={employee} />
+      <TerminatePanel open={panel === "terminate"} onClose={() => setPanel(null)} employee={employee} directReportCount={directReports.length} />
+      <RehirePanel open={panel === "rehire"} onClose={() => setPanel(null)} employee={employee} />
     </div>
   );
 }