Remove role management from AuthHex; update documentation and user handling to reflect ERP ownership of roles.

Models/Role.cs

@@ -1,15 +0,0 @@
-namespace AuthHex.Models
-{
-    public class Role
-    {
-        public Guid RoleId { get; set; }
-
-        public string Code { get; set; } = string.Empty;   // ADMIN, USER, STAFF
-        public string?Name { get; set; } = string.Empty;
-
-        public bool? IsSystemRole { get; set; }
-
-        public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
-
-    }
-}

Models/User.cs

@@ -30,10 +30,9 @@ namespace AuthHex.Models
         public bool IsMfaEnabled { get; set; }
         public UserMfa? UserMfa { get; set; }
 
-        //User Role and Type
-        public Guid RoleId { get; set; }
-        public Role? Role { get; set; }
-
+        // Roles are not an authentication concern: the ERP owns a person's role and permissions (users.RoleId in ERPCore).
+        // AuthHex only says who the person is. (The old Users.RoleId column is left in the table, nullable and unmapped,
+        // until it is dropped - see Docs/migrations/2026-10-remove-roles.sql.)
         public Guid UserTypeId { get; set; }
         public UserType? UserType { get; set; }