feat(phases-10-15): complete TapTrack Hub v1.0

Phase 10 — Support Ticket System:
- tickets.py router: SLA status (on_track/at_risk/breached/responded), email
  notifications on create+reply via background threads, school_name in list,
  priority filter, bulk-close endpoint
- tasks/tickets.py: escalate_stale Celery task (48h→high, 72h no reply→urgent)
- worker.py: escalate_stale scheduled every hour
- templates/email/ticket_notification.html: HTML ticket notification email
- TicketsPage.vue: status tabs, SLA badge, priority badge, school name column,
  checkbox bulk-close, pagination
- TicketDetailPage.vue: inline priority/status/assignee selectors, SLA timer,
  internal note lock icon, closed-ticket guard

Phase 11 — Monthly Report Generation:
- models/report.py: MonthlyReport + SchoolMonthlyStats ORM models
- tasks/reports.py: send_monthly_reports enhanced with SMS stats, attendance
  data, invoice summary, stores MonthlyReport record per school per month

Phase 12 — On-Prem Monthly Report Pull:
- tasks/reports.py: pull_monthly_stats task — httpx GET to each school's
  hub_base_url, upserts SchoolMonthlyStats; runs 1st at 5am
- worker.py: pull_monthly_stats scheduled 1st at 5am

Phase 13 — Feature Flags + Suspension:
- models/school.py: hub_base_url, feature_overrides (JSON), onboarding_completed_at
- routers/schools.py: PUT /{id}/feature-overrides endpoint
- routers/sync.py: _tier_features() merges school.feature_overrides into poll config

Phase 14 — Onboarding Wizard + Welcome Email:
- tasks/onboarding.py: send_welcome_email Celery task with license key
- routers/schools.py: auto-trigger welcome email on POST /schools,
  POST /{id}/activate (status→active + onboarding_completed_at),
  POST /{id}/resend-welcome

Phase 15 — UX Polish + Ops Tools:
- routers/search.py: GET /api/search?q= (schools + invoices + tickets, 5 each)
- routers/audit.py: GET /api/audit-logs (paginated, filterable)
- AppLayout.vue: global search bar with debounced dropdown, result navigation
- AuditLogsPage.vue: new page with filter + pagination
- AppSidebar.vue: Audit Logs nav item added
- router/index.ts: /audit-logs route
- api.ts: globalSearch, getAuditLogs, activateSchool, resendWelcomeEmail,
  updateFeatureOverrides, bulkCloseTickets

Deployment:
- docker-compose.yml: x-backend-env anchor (DRY), PDF_DIR env var,
  seed service (one-shot python seed.py on first boot)
- migrations/003_phases11_15.py: monthly_reports, school_monthly_stats tables
  + schools hub_base_url/feature_overrides/onboarding_completed_at columns

backend/app/models/report.py

@@ -0,0 +1,37 @@
+"""Monthly report and school stats models."""
+import uuid
+from datetime import datetime, timezone, date
+from sqlalchemy import String, DateTime, Date, Text, JSON, Numeric, Integer, ForeignKey
+from sqlalchemy.orm import Mapped, mapped_column
+from app.database import Base
+
+
+class MonthlyReport(Base):
+    """Record of each monthly report sent to a school."""
+    __tablename__ = "monthly_reports"
+
+    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=lambda: str(uuid.uuid4()))
+    school_id: Mapped[str] = mapped_column(String(36), ForeignKey("schools.id", ondelete="CASCADE"), nullable=False, index=True)
+    report_month: Mapped[str] = mapped_column(String(7), nullable=False)  # YYYY-MM
+    email_sent_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
+    report_data: Mapped[dict | None] = mapped_column(JSON, nullable=True)
+    created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=lambda: datetime.now(timezone.utc))
+
+
+class SchoolMonthlyStats(Base):
+    """Attendance + SMS stats pulled from on-prem each month."""
+    __tablename__ = "school_monthly_stats"
+
+    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=lambda: str(uuid.uuid4()))
+    school_id: Mapped[str] = mapped_column(String(36), ForeignKey("schools.id", ondelete="CASCADE"), nullable=False, index=True)
+    report_month: Mapped[str] = mapped_column(String(7), nullable=False)  # YYYY-MM
+    total_students: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    school_days: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    present_days_total: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    absent_days_total: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    late_days_total: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    avg_attendance_rate: Mapped[float | None] = mapped_column(Numeric(5, 2), nullable=True)
+    sms_sent: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    pull_status: Mapped[str] = mapped_column(String(20), default="unavailable", nullable=False)  # success|failed|unavailable
+    pulled_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
+    hub_base_url: Mapped[str | None] = mapped_column(String(500), nullable=True)

backend/app/models/school.py

@@ -34,6 +34,9 @@ class School(Base):
     sms_sender_name: Mapped[str] = mapped_column(String(11), default="SCHOOL", nullable=False)
     sms_credits: Mapped[float] = mapped_column(Numeric(12, 2), default=0.0, nullable=False)
     sms_credit_low_threshold: Mapped[int] = mapped_column(Integer, default=50, nullable=False)
+    hub_base_url: Mapped[str | None] = mapped_column(String(500), nullable=True)
+    feature_overrides: Mapped[dict | None] = mapped_column(Text, nullable=True)  # JSON string
+    onboarding_completed_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
     created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=lambda: datetime.now(timezone.utc))
     notes: Mapped[str | None] = mapped_column(Text, nullable=True)