feat: bulk XML upload, period selector, and session persistence

- Add bulk XML CFDI upload support (up to 300MB)
- Add period selector component for month/year navigation
- Fix session persistence on page refresh (Zustand hydration)
- Fix income/expense classification based on tenant RFC
- Fix IVA calculation from XML (correct Impuestos element)
- Add error handling to reportes page
- Support multiple CORS origins
- Update reportes service with proper Decimal/BigInt handling
- Add RFC to tenant view store for proper CFDI classification
- Update README with changelog and new features

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/api/src/controllers/tenants.controller.ts

@@ -58,3 +58,40 @@ export async function createTenant(req: Request, res: Response, next: NextFuncti
     next(error);
   }
 }
+
+export async function updateTenant(req: Request, res: Response, next: NextFunction) {
+  try {
+    if (req.user!.role !== 'admin') {
+      throw new AppError(403, 'Solo administradores pueden editar clientes');
+    }
+
+    const { id } = req.params;
+    const { nombre, rfc, plan, cfdiLimit, usersLimit, active } = req.body;
+
+    const tenant = await tenantsService.updateTenant(id, {
+      nombre,
+      rfc,
+      plan,
+      cfdiLimit,
+      usersLimit,
+      active,
+    });
+
+    res.json(tenant);
+  } catch (error) {
+    next(error);
+  }
+}
+
+export async function deleteTenant(req: Request, res: Response, next: NextFunction) {
+  try {
+    if (req.user!.role !== 'admin') {
+      throw new AppError(403, 'Solo administradores pueden eliminar clientes');
+    }
+
+    await tenantsService.deleteTenant(req.params.id);
+    res.status(204).send();
+  } catch (error) {
+    next(error);
+  }
+}