feat: bulk XML upload, period selector, and session persistence

- Add bulk XML CFDI upload support (up to 300MB)
- Add period selector component for month/year navigation
- Fix session persistence on page refresh (Zustand hydration)
- Fix income/expense classification based on tenant RFC
- Fix IVA calculation from XML (correct Impuestos element)
- Add error handling to reportes page
- Support multiple CORS origins
- Update reportes service with proper Decimal/BigInt handling
- Add RFC to tenant view store for proper CFDI classification
- Update README with changelog and new features

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/api/src/services/tenants.service.ts

@@ -139,3 +139,43 @@ export async function createTenant(data: {
 
   return tenant;
 }
+
+export async function updateTenant(id: string, data: {
+  nombre?: string;
+  rfc?: string;
+  plan?: 'starter' | 'business' | 'professional' | 'enterprise';
+  cfdiLimit?: number;
+  usersLimit?: number;
+  active?: boolean;
+}) {
+  return prisma.tenant.update({
+    where: { id },
+    data: {
+      ...(data.nombre && { nombre: data.nombre }),
+      ...(data.rfc && { rfc: data.rfc.toUpperCase() }),
+      ...(data.plan && { plan: data.plan }),
+      ...(data.cfdiLimit !== undefined && { cfdiLimit: data.cfdiLimit }),
+      ...(data.usersLimit !== undefined && { usersLimit: data.usersLimit }),
+      ...(data.active !== undefined && { active: data.active }),
+    },
+    select: {
+      id: true,
+      nombre: true,
+      rfc: true,
+      plan: true,
+      schemaName: true,
+      cfdiLimit: true,
+      usersLimit: true,
+      active: true,
+      createdAt: true,
+    }
+  });
+}
+
+export async function deleteTenant(id: string) {
+  // Soft delete - just mark as inactive
+  return prisma.tenant.update({
+    where: { id },
+    data: { active: false }
+  });
+}