West Coast Pest - Session and Phone Login Final Fix

Install: extract this ZIP inside /home/uent/public_html/ and overwrite files.

Fixes:
- Staff login works with email + password.
- Staff login works with phone + password.
- SA phone formats are matched as the same number: 079..., +2779..., 2779..., 002779...
- If duplicate phone numbers already exist from old data, login checks all matching users and verifies the password against each, instead of picking the newest duplicate user.
- Mobile attendance state uses clock_out_time IS NULL as the only truth for open sessions.
- Attendance history includes open sessions even if worksite data is missing.
- Working lunch uses clock_out_time IS NULL and no longer relies on session_status.
- Stale open sessions from previous days are auto-closed on login/history.
- Duplicate open sessions for the same user are reduced to the latest open session.

Important:
- No database schema change is required.
- Existing duplicate phone numbers should still be cleaned when convenient, but staff can log in again now.
