refactor: move buildable .NET source into src/, update CI/doc paths

Groups the repo root into src (buildable source), docs (already existed),
and everything else (db/, scripts/, tests/, deploy/ - deployment/ops/test
assets that aren't compiled, already organized as their own folders). CI
now only needs src/ to build: dotnet restore/build/test/publish all point
at src/TaxBaik.sln, src/TaxBaik.Web/, src/TaxBaik.Proxy/.

- git mv every project (Domain, Infrastructure, Application,
  Application.Tests, Web, Web.Client, Proxy) and TaxBaik.sln into src/ as a
  unit, so relative ProjectReference/.sln paths stay valid unchanged.
- .gitea/workflows/deploy.yml: 6 dotnet restore/clean/build/test/publish
  invocations now point at src/. db/migrations and scripts/ stay at root
  (deploy_gb.sh and browser-e2e.yml only touch published output and the
  deployed URL, not source paths - verified, no changes needed there).
- scripts/validate_admin_render.sh: admin render-mode file paths now
  src/TaxBaik.Web.Client/...
- scripts/validate_kst_timestamps.sh: dropped deploy.sh from its target
  list - that script was removed in the prior cleanup commit (dead, no
  CI workflow referenced it) but this validator still expected it to exist.
- CLAUDE.md, docs/ENGINEERING_HARNESS.md, docs/ADMIN_PATTERN_CRITIQUE_WBS.md:
  updated project-structure diagram, dotnet run/build commands, and grep
  targets to the new src/ paths (also fixed a pre-existing stale path in
  ADMIN_PATTERN_CRITIQUE_WBS.md that still said TaxBaik.Web/Components/Admin
  from before that ever moved to TaxBaik.Web.Client).
- Added a Repo Root harness rule + Architecture Guardrail entries: new files
  belong under src/docs/tests/scripts/db/deploy, not loose at root; temp
  work stays outside the repo (or under a gitignored .scratch/) and is
  never committed.

Verified locally: dotnet build/test src/TaxBaik.sln (26/26 tests), and all
three scripts/validate_*.sh pass against the new layout.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

src/TaxBaik.Web/Controllers/ContractController.cs

@@ -0,0 +1,116 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using TaxBaik.Application.Services;
+
+namespace TaxBaik.Web.Controllers;
+
+[ApiController]
+[Route("api/[controller]")]
+[Authorize]
+public class ContractController(ContractService service) : ControllerBase
+{
+    [HttpPost]
+    public async Task<IActionResult> Create([FromBody] CreateContractRequest request)
+    {
+        try
+        {
+            var id = await service.CreateAsync(request.ClientId, request.ContractNumber, request.ServiceType,
+                request.StartDate, request.MonthlyFee, request.TotalAmount);
+            return CreatedAtAction(nameof(GetById), new { id }, new { id });
+        }
+        catch (ValidationException ex)
+        {
+            return BadRequest(new { error = ex.Message });
+        }
+    }
+
+    [HttpGet]
+    public async Task<IActionResult> GetAll()
+    {
+        try
+        {
+            var contracts = await service.GetAllAsync();
+            return Ok(contracts);
+        }
+        catch (Exception ex)
+        {
+            return StatusCode(500, new { error = "조회 실패", message = ex.Message });
+        }
+    }
+
+    [HttpGet("{id:int}")]
+    public async Task<IActionResult> GetById(int id)
+    {
+        try
+        {
+            var contract = await service.GetByIdAsync(id);
+            if (contract == null)
+                return NotFound(new { error = "계약을 찾을 수 없습니다." });
+            return Ok(contract);
+        }
+        catch (Exception ex)
+        {
+            return StatusCode(500, new { error = "조회 실패", message = ex.Message });
+        }
+    }
+
+    [HttpGet("client/{clientId:int}")]
+    public async Task<IActionResult> GetByClientId(int clientId)
+    {
+        try
+        {
+            var contracts = await service.GetByClientIdAsync(clientId);
+            return Ok(new { data = contracts });
+        }
+        catch (Exception ex)
+        {
+            return StatusCode(500, new { error = "조회 실패", message = ex.Message });
+        }
+    }
+
+    [HttpGet("active")]
+    public async Task<IActionResult> GetActiveContracts()
+    {
+        try
+        {
+            var contracts = await service.GetActiveContractsAsync();
+            return Ok(new { data = contracts });
+        }
+        catch (Exception ex)
+        {
+            return StatusCode(500, new { error = "조회 실패", message = ex.Message });
+        }
+    }
+
+    [HttpGet("expiring")]
+    public async Task<IActionResult> GetExpiringContracts([FromQuery] int daysAhead = 30)
+    {
+        try
+        {
+            var contracts = await service.GetExpiringContractsAsync(daysAhead);
+            return Ok(new { data = contracts, daysAhead });
+        }
+        catch (Exception ex)
+        {
+            return StatusCode(500, new { error = "조회 실패", message = ex.Message });
+        }
+    }
+
+    [HttpGet("mrr")]
+    public async Task<IActionResult> GetMonthlyRecurringRevenue()
+    {
+        try
+        {
+            var mrr = await service.GetMonthlyRecurringRevenueAsync();
+            return Ok(new { mrr });
+        }
+        catch (Exception ex)
+        {
+            return StatusCode(500, new { error = "조회 실패", message = ex.Message });
+        }
+    }
+
+    public record CreateContractRequest(
+        int ClientId, string ContractNumber, string ServiceType, DateTime StartDate,
+        decimal? MonthlyFee = null, decimal? TotalAmount = null);
+}