refactor: TBM/작업보고 코드 통합 및 API 쿼리 버그 수정

- 공통 유틸리티 추출 (common/utils.js, common/base-state.js)
- TBM 모바일 인라인 JS/CSS 외부 파일로 분리 (tbm-mobile.js, tbm-mobile.css)
- 미사용 코드 삭제 (index.js, work-report-*.js 등 5개 파일)
- TBM/작업보고 state.js, utils.js를 공통 모듈 기반으로 전환
- 작업보고서 SSO 인증 호환 수정 (token/user 함수)
- tbmModel.js: incomplete-reports 쿼리에서 users→sso_users 조인 수정, leader_name 조인 추가
- docker-compose.yml: system1-web 볼륨 마운트 추가
- 모바일 인계(handover) 기능 추가

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

user-management/api/projectModel.js

@@ -0,0 +1,79 @@
+/**
+ * Project Model
+ *
+ * projects 테이블 CRUD (MariaDB)
+ * System 1과 같은 DB를 공유
+ */
+
+const { getPool } = require('./userModel');
+
+async function getAll() {
+  const db = getPool();
+  const [rows] = await db.query(
+    'SELECT * FROM projects ORDER BY project_id DESC'
+  );
+  return rows;
+}
+
+async function getActive() {
+  const db = getPool();
+  const [rows] = await db.query(
+    'SELECT * FROM projects WHERE is_active = TRUE ORDER BY project_name ASC'
+  );
+  return rows;
+}
+
+async function getById(id) {
+  const db = getPool();
+  const [rows] = await db.query(
+    'SELECT * FROM projects WHERE project_id = ?',
+    [id]
+  );
+  return rows[0] || null;
+}
+
+async function create({ job_no, project_name, contract_date, due_date, delivery_method, site, pm }) {
+  const db = getPool();
+  const [result] = await db.query(
+    `INSERT INTO projects (job_no, project_name, contract_date, due_date, delivery_method, site, pm)
+     VALUES (?, ?, ?, ?, ?, ?, ?)`,
+    [job_no, project_name, contract_date || null, due_date || null, delivery_method || null, site || null, pm || null]
+  );
+  return getById(result.insertId);
+}
+
+async function update(id, data) {
+  const db = getPool();
+  const fields = [];
+  const values = [];
+
+  if (data.job_no !== undefined) { fields.push('job_no = ?'); values.push(data.job_no); }
+  if (data.project_name !== undefined) { fields.push('project_name = ?'); values.push(data.project_name); }
+  if (data.contract_date !== undefined) { fields.push('contract_date = ?'); values.push(data.contract_date || null); }
+  if (data.due_date !== undefined) { fields.push('due_date = ?'); values.push(data.due_date || null); }
+  if (data.delivery_method !== undefined) { fields.push('delivery_method = ?'); values.push(data.delivery_method); }
+  if (data.site !== undefined) { fields.push('site = ?'); values.push(data.site); }
+  if (data.pm !== undefined) { fields.push('pm = ?'); values.push(data.pm); }
+  if (data.is_active !== undefined) { fields.push('is_active = ?'); values.push(data.is_active); }
+  if (data.project_status !== undefined) { fields.push('project_status = ?'); values.push(data.project_status); }
+  if (data.completed_date !== undefined) { fields.push('completed_date = ?'); values.push(data.completed_date || null); }
+
+  if (fields.length === 0) return getById(id);
+
+  values.push(id);
+  await db.query(
+    `UPDATE projects SET ${fields.join(', ')} WHERE project_id = ?`,
+    values
+  );
+  return getById(id);
+}
+
+async function deactivate(id) {
+  const db = getPool();
+  await db.query(
+    'UPDATE projects SET is_active = FALSE, project_status = ? WHERE project_id = ?',
+    ['completed', id]
+  );
+}
+
+module.exports = { getAll, getActive, getById, create, update, deactivate };