Closes #14. Users get a UserProfile (Employee or Client) instead of auto-creating Employee records; admins manage types via profile and manage-users UI; time entry and reports filter to employees only; clients get read-only financial access.
Closes #14. Users get a UserProfile (Employee or Client) instead of auto-creating Employee records; admins manage types via profile and manage-users UI; time entry and reports filter to employees only; clients get read-only financial access.