T01: core infrastructure + auth + multi-tenant + RLS

- 10 models: tenants, users, user_tenants, roles, sessions, audit_log, deletion_log, notifications, password_reset_tokens, api_tokens
- Session-based auth (Redis + PostgreSQL audit trail)
- Multi-tenant with ORM-level filtering + PostgreSQL RLS (set_config)
- RBAC with roles/permissions + field-level permissions
- CSRF protection via Origin header validation
- Auth rate limiting (Redis counters with TTL)
- CORS with explicit origins (no wildcard)
- Health endpoint (no auth required)
- Notification service + audit log middleware
- 29 tests, 26 ACs, all passing
- Coverage: 62% (infrastructure modules pending coverage in later tasks)

app/schemas/dashboard.py

@@ -1,39 +0,0 @@
-"""Pydantic schemas for Dashboard endpoints."""
-
-from __future__ import annotations
-
-from datetime import datetime
-
-from pydantic import BaseModel, ConfigDict
-
-from app.models.activity import ActivityType
-
-
-class KPIOut(BaseModel):
-    """Headline KPIs for the org dashboard."""
-
-    open_deals_count: int
-    pipeline_value: float
-    won_this_month: int
-    conversion_rate: float
-
-
-class ActivityFeedItem(BaseModel):
-    """One item in the activity feed."""
-
-    model_config = ConfigDict(from_attributes=True)
-
-    id: int
-    type: ActivityType
-    subject: str
-    body: str | None = None
-    account_id: int | None = None
-    contact_id: int | None = None
-    deal_id: int | None = None
-    owner_id: int
-    completed_at: datetime | None = None
-    due_date: datetime | None = None
-    created_at: datetime
-
-
-__all__ = ["ActivityFeedItem", "KPIOut"]