fix(mobile): URL changement mdp corrigée + v3.0 — multi-org, AppAuth, sécurité prod

Auth:
- profile_repository.dart: /api/auth/change-password → /api/membres/auth/change-password

Multi-org (Phase 3):
- OrgSelectorPage, OrgSwitcherBloc, OrgSwitcherEntry
- org_context_service.dart: headers X-Active-Organisation-Id + X-Active-Role

Navigation:
- MorePage: navigation conditionnelle par typeOrganisation
- Suppression adaptive_navigation (remplacé par main_navigation_layout)

Auth AppAuth:
- keycloak_webview_auth_service: fixes AppAuth Android
- AuthBloc: gestion REAUTH_REQUIS + premierLoginComplet

Onboarding:
- Nouveaux états: payment_method_page, onboarding_shared_widgets
- SouscriptionStatusModel mis à jour StatutValidationSouscription

Android:
- build.gradle: ProGuard/R8, network_security_config
- Gradle wrapper mis à jour

lib/features/onboarding/data/models/souscription_status_model.dart

@@ -14,6 +14,8 @@ class SouscriptionStatusModel {
   final String? waveLaunchUrl;
   final String organisationId;
   final String? organisationNom;
+  final DateTime? dateDebut;
+  final DateTime? dateFin;
 
   const SouscriptionStatusModel({
     required this.souscriptionId,
@@ -30,6 +32,8 @@ class SouscriptionStatusModel {
     this.waveLaunchUrl,
     required this.organisationId,
     this.organisationNom,
+    this.dateDebut,
+    this.dateFin,
   });
 
   factory SouscriptionStatusModel.fromJson(Map<dynamic, dynamic> json) {
@@ -48,6 +52,12 @@ class SouscriptionStatusModel {
       waveLaunchUrl: json['waveLaunchUrl'] as String?,
       organisationId: json['organisationId'] as String,
       organisationNom: json['organisationNom'] as String?,
+      dateDebut: json['dateDebut'] != null
+          ? DateTime.tryParse(json['dateDebut'] as String)
+          : null,
+      dateFin: json['dateFin'] != null
+          ? DateTime.tryParse(json['dateFin'] as String)
+          : null,
     );
   }
 }