T01: core infrastructure + auth + multi-tenant + RLS

- 10 models: tenants, users, user_tenants, roles, sessions, audit_log, deletion_log, notifications, password_reset_tokens, api_tokens
- Session-based auth (Redis + PostgreSQL audit trail)
- Multi-tenant with ORM-level filtering + PostgreSQL RLS (set_config)
- RBAC with roles/permissions + field-level permissions
- CSRF protection via Origin header validation
- Auth rate limiting (Redis counters with TTL)
- CORS with explicit origins (no wildcard)
- Health endpoint (no auth required)
- Notification service + audit log middleware
- 29 tests, 26 ACs, all passing
- Coverage: 62% (infrastructure modules pending coverage in later tasks)

app/models/contact.py

@@ -1,58 +0,0 @@
-"""Contact model: people at accounts (or standalone contacts)."""
-
-from __future__ import annotations
-
-from typing import TYPE_CHECKING
-
-from sqlalchemy import ForeignKey, String
-from sqlalchemy.orm import Mapped, mapped_column, relationship
-
-from app.models.base import Base, OrgScopedMixin, SoftDeleteMixin, TimestampMixin
-
-if TYPE_CHECKING:
-    from app.models.account import Account
-    from app.models.activity import Activity
-    from app.models.note import Note
-    from app.models.tag_link import TagLink
-    from app.models.user import User
-
-
-class Contact(Base, TimestampMixin, SoftDeleteMixin, OrgScopedMixin):
-    __tablename__ = "contacts"
-
-    id: Mapped[int] = mapped_column(primary_key=True, autoincrement=True)
-    first_name: Mapped[str] = mapped_column(String(128), nullable=False)
-    last_name: Mapped[str] = mapped_column(String(128), nullable=False, index=True)
-    email: Mapped[str | None] = mapped_column(String(255), nullable=True, index=True)
-    phone: Mapped[str | None] = mapped_column(String(64), nullable=True)
-    account_id: Mapped[int | None] = mapped_column(
-        ForeignKey("accounts.id"), nullable=True, index=True
-    )
-    owner_id: Mapped[int] = mapped_column(ForeignKey("users.id"), nullable=False, index=True)
-
-    # Relationships
-    account: Mapped[Account | None] = relationship(
-        "Account", back_populates="contacts", lazy="selectin"
-    )
-    owner: Mapped[User] = relationship("User", foreign_keys=[owner_id], lazy="joined")
-    activities: Mapped[list[Activity]] = relationship(
-        "Activity", back_populates="contact", lazy="selectin"
-    )
-    notes: Mapped[list[Note]] = relationship(
-        "Note",
-        primaryjoin="and_(Contact.id==foreign(Note.parent_id), Note.parent_type=='contact')",
-        viewonly=True,
-        lazy="selectin",
-    )
-    tags: Mapped[list[TagLink]] = relationship(
-        "TagLink",
-        primaryjoin="and_(Contact.id==foreign(TagLink.parent_id), TagLink.parent_type=='contact')",
-        viewonly=True,
-        lazy="selectin",
-    )
-
-    def __repr__(self) -> str:
-        return f"<Contact id={self.id} {self.first_name} {self.last_name!r}>"
-
-
-__all__ = ["Contact"]