Deactivate client

Deactivate a client/supplier (soft-delete: ativo=0). Reversible via POST /{client_id}/reactivate. Kept on the DELETE verb so existing callers keep working; the client just disappears from lists/pickers while the name still resolves in the history. Verifies company ownership (IDempresa).