Feat/skv integration full (#284)

* feat: add script to import Skatteverket monthly tax tables as fallback TypeScript module

- Implemented a new script `import-tax-tables.ts` to parse fixed-width TXT tax tables from Skatteverket (SKV 434).
- The script generates a TypeScript module for emergency fallback when the Skatteverket open-data API is unavailable.
- Supports command-line argument for specifying the year and handles parsing of B-rows only.
- Outputs a structured TypeScript file containing tax data for specified years.

* feat: gate salary module behind dev-only flag

Temporarily disable the Lön module in production while the feature is
being completed. Sidebar entries ("Löner", "Anställda") still render but
are not clickable and show a "Kommer snart" badge. Middleware redirects
/salary* to / and returns 404 on /api/salary/* so the feature can't be
reached by direct URL. All gates check NODE_ENV === 'development' so
local dev keeps full access for continued development.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* feat: refactor bank file import wizard to streamline column mapping and enhance CSV handling

* fix: bump migration timestamp to avoid collision with logos_bucket

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* feat: enhance AGI generation and salary entry calculations with improved status checks and error handling

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

lib/supabase/middleware.ts

@@ -42,6 +42,18 @@ export async function updateSession(request: NextRequest) {
   // Get the pathname
   const pathname = request.nextUrl.pathname
 
+  // Salary feature is temporarily disabled in production — block page and API
+  // routes. Sidebar links render as "Kommer snart" and direct URL access is
+  // blocked. Local dev (NODE_ENV === 'development') keeps everything enabled
+  // so we can continue building the feature.
+  const SALARY_DISABLED = process.env.NODE_ENV !== 'development'
+  if (SALARY_DISABLED && (pathname === '/salary' || pathname.startsWith('/salary/') || pathname.startsWith('/api/salary/'))) {
+    if (pathname.startsWith('/api/')) {
+      return NextResponse.json({ error: 'Lön är inte tillgängligt ännu.' }, { status: 404 })
+    }
+    return NextResponse.redirect(new URL('/', request.url))
+  }
+
   // If the refresh token is stale/invalid, clear the session cookies
   // so the browser stops sending them on every request.
   // Skip on auth routes — the callback needs PKCE cookies intact.