Faza 6: Activity log + Kanban + Payroll + cleanup

══════ Activity log (Spatie) ══════
- spatie/laravel-activitylog v5 instalat
- Migration cu company_id pentru tenant scoping
- Trait Auditable (App\Models\Concerns\Auditable):
  - LogOptions cu logFillable + logOnlyDirty + dontSubmitEmptyLogs
  - tapActivity auto-fill company_id + causer
  - Descrieri RO (creat/modificat/șters/restaurat)
- Aplicat pe: Client, Vehicle, Lead, Deal, WorkOrder, Payment, Expense
- ActivityResource (group Admin → Jurnal activitate)
  - Listă read-only, scope pe tenant, filtre by description/today

══════ Kanban Work Orders ══════
- Custom Filament page la /app/kanban (group Service)
- 6 coloane (new → diagnosis → agreement → in_work → awaiting_parts → ready)
- Drag-drop nativ HTML5 cu wire:click moveCard()
- Cards arată: număr fișă, client, auto, plate, master, total
- Link 'Deschide' direct la editare WO

══════ Payroll (Salarii) ══════
Schema:
- employee_profiles: user_id, position, base_salary, works_pct, parts_pct
- payroll_runs: period (YYYY-MM), base, works_revenue/pct, parts_margin/pct,
  bonus, fines, advance, total auto-calculat
- payroll_adjustments: bonus/fine/advance per period

PayrollCalculator service:
- compute($userId, $period) — calculează auto:
  - Manopere finalizate de mecanic în luna respectivă (sum total)
  - Marja pieselor montate de el (sell-buy * qty)
  - Bonus + fines + advance from adjustments
  - Total = base + works% + parts% + bonus - fines - advance

Resources Filament (group Finanțe):
- EmployeeProfileResource: profil cu % comisioane
- PayrollRunResource: salarii cu action 'Calculează luna curentă' (toți userii)
  + per-row 'Recalculează'; Sum summary pe total
- PayrollAdjustmentResource: gestionare bonus/penalizări/avansuri

══════ Cleanup ══════
- Șterse toate /__debug, /__seed, /__try-login, /__force-login, /__whoami,
  /__coolify-check (security)
- Routes/web.php conține doar / redirect, /manifest.json, /sw.js

Total Filament tenant routes: 92.

routes/web.php

@@ -4,25 +4,6 @@ use App\Tenancy\TenantManager;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Route;
 
-Route::get('/__coolify-check/{token}', function (string $token) {
-    if ($token !== 'kx9zMq7vR3aF2') abort(404);
-    $cli = app(\App\Services\CoolifyClient::class);
-    $ref = new \ReflectionClass($cli);
-    $b = $ref->getProperty('base'); $b->setAccessible(true);
-    $t = $ref->getProperty('token'); $t->setAccessible(true);
-    return response()->json([
-        'config_url' => config('services.coolify.url'),
-        'config_token_set' => (bool) config('services.coolify.token'),
-        'config_app_uuid' => config('services.coolify.app_uuid'),
-        'env_url' => env('COOLIFY_API_URL'),
-        'env_token_set' => (bool) env('COOLIFY_API_TOKEN'),
-        'env_app_uuid' => env('COOLIFY_APP_UUID'),
-        'client_base' => $b->getValue($cli),
-        'client_token_set' => (bool) $t->getValue($cli),
-        'client_isConfigured' => $cli->isConfigured(),
-    ], 200, [], JSON_PRETTY_PRINT);
-});
-
 Route::get('/', function () {
     // On a tenant subdomain → redirect to the tenant panel.
     if (app(TenantManager::class)->isResolved()) {