feat: cascade deletes, student notes, import popups, module reorganization

- Cascade delete on all entities (student, module, UE, user, role, promotion)
- Fix Response body reuse bug (factory functions instead of constants)
- Student note viewing via CAS uid (strip non-digit prefix)
- Fix middleware page visibility for students in LOCAL mode
- Import result popup component (shared across all import pages)
- Fix student import to use numEtud from Excel
- Bulk student selection with promo change and delete
- Move UE/UE-Module API and pages from notes to admin module
- Move promotions page from students to admin module
- Multi-year maquette import with per-year promo selection
- Inline promo creation in maquette import
- Static Excel templates (students, notes, maquette)
- Fix XLSX export using blob download instead of writeFile
- Allow students to read modules list (GET /modules)

routes/(apps)/notes/api/ajustements.ts

@@ -52,8 +52,12 @@ export const handler: Handlers<null, AuthenticatedState> = {
     }
 
     try {
-      const body: { numEtud: number; idUE: number; valeur: number } =
-        await request.json();
+      const body: {
+        numEtud: number;
+        idUE: number;
+        valeur: number;
+        malus?: number;
+      } = await request.json();
 
       if (!body.numEtud || !body.idUE || body.valeur === undefined) {
         return new Response(
@@ -62,12 +66,23 @@ export const handler: Handlers<null, AuthenticatedState> = {
         );
       }
 
+      if (
+        body.malus !== undefined &&
+        (!Number.isInteger(body.malus) || body.malus < 0)
+      ) {
+        return new Response(
+          JSON.stringify({ error: "malus doit être un entier >= 0" }),
+          { status: 400, headers: { "content-type": "application/json" } },
+        );
+      }
+
       const [created] = await db
         .insert(ajustements)
         .values({
           numEtud: body.numEtud,
           idUE: body.idUE,
           valeur: body.valeur,
+          malus: body.malus ?? 0,
         })
         .returning();