chore: remove unused profile lock migration and admin_profile_service

lib/routing/app_router.dart

@@ -4,6 +4,8 @@ import 'package:go_router/go_router.dart';
 
 import '../providers/auth_provider.dart';
 import '../providers/profile_provider.dart';
+import '../providers/supabase_provider.dart';
+import '../utils/lock_enforcer.dart';
 import '../screens/auth/login_screen.dart';
 import '../screens/auth/signup_screen.dart';
 import '../screens/admin/offices_screen.dart';
@@ -142,6 +144,14 @@ final appRouterProvider = Provider<GoRouter>((ref) {
 class RouterNotifier extends ChangeNotifier {
   RouterNotifier(this.ref) {
     _authSub = ref.listen(authStateChangesProvider, (previous, next) {
+      // Enforce app-level profile lock when a session becomes available.
+      next.whenData((authState) {
+        final session = authState.session;
+        if (session != null) {
+          // Fire-and-forget enforcement (best-effort client-side sign-out)
+          enforceLockForCurrentUser(ref.read(supabaseClientProvider));
+        }
+      });
       notifyListeners();
     });
     _profileSub = ref.listen(currentProfileProvider, (previous, next) {