feat: shop UX polish — password reset / order email / multi-image / customer admin

Shop password reset:
- Configured 'shop_customers' password broker on the existing
  password_reset_tokens table
- ShopCustomer::sendPasswordResetNotification overrides Laravel default to
  send a ShopPasswordResetMail with a tenant-subdomain reset URL
- Routes /shop/password/forgot, /shop/password/email, /shop/password/reset/{token}
  + ShopAuthController showForgotPassword/sendResetLink/showResetPassword/
  resetPassword. Forgot view stays generic ("if it exists, we sent…") to avoid
  email enumeration. Login view links to "Am uitat parola".

Order confirmation email:
- ShopOrderConfirmationMail + nicely formatted HTML email template
- ShopOrderNotifier::placed now also emails customer_email (best-effort,
  warning-only logged on failure) alongside existing Telegram + staff push

Multiple images per Part:
- Part media collection switched from singleFile to multiple (max 8 in form)
- imageUrls() helper for galleries; imageUrl() still returns first for cards
- PartResource form: reorderable multi-upload
- Shop part detail: vertical thumbnails switch the main image via vanilla JS

ShopCustomerResource (tenant Filament, "Magazin" nav group):
- List with name/phone/email/client_id/orders_count/last_login_at
- Edit (no password field exposed)
- "Trimite reset parolă" action uses the new broker
- OrdersRelationManager shows the customer's orders read-only

Tests (7 new):
- forgot sends mail; forgot doesn't disclose unknown email; reset with valid
  token changes password; bad token rejected; order email when customer_email
  set; email skipped without it; Part has imageUrls() collection

Full suite: 130 passed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

app/Models/Tenant/Part.php

@@ -16,7 +16,8 @@ class Part extends Model implements HasMedia
 
     public function registerMediaCollections(): void
     {
-        $this->addMediaCollection('image')->singleFile();
+        // Multi-image gallery (catalog uses imageUrl() = first; detail page renders all).
+        $this->addMediaCollection('image');
     }
 
     public function imageUrl(): ?string
@@ -27,6 +28,15 @@ class Part extends Model implements HasMedia
         return $m->getUrl();
     }
 
+    /** @return list<string> All published image URLs (excluding any whose file is missing). */
+    public function imageUrls(): array
+    {
+        return $this->getMedia('image')
+            ->filter(fn ($m) => @file_exists($m->getPath()))
+            ->map(fn ($m) => $m->getUrl())
+            ->values()->all();
+    }
+
     public const CATEGORIES = [
         'Ulei', 'Filtre', 'Frâne', 'Suspensie', 'Lichide',
         'Distribuție', 'Anvelope', 'Electrică', 'Caroserie', 'Altele',

app/Models/Tenant/ShopCustomer.php

@@ -39,4 +39,18 @@ class ShopCustomer extends Authenticatable
     {
         return 'id';
     }
+
+    /** Send custom reset mail with a /shop/password/reset URL on the tenant subdomain. */
+    public function sendPasswordResetNotification($token): void
+    {
+        $tenant = \App\Models\Central\Company::withoutGlobalScopes()->find($this->company_id);
+        if (! $tenant || ! $this->email) return;
+
+        $central = config('app.central_domain') ?: config('tenancy.central_domains.0', 'service.mir.md');
+        $url = "https://{$tenant->slug}.{$central}/shop/password/reset/{$token}?email=" . urlencode($this->email);
+
+        \Illuminate\Support\Facades\Mail::to($this->email)->send(
+            new \App\Mail\ShopPasswordResetMail($this, $tenant, $url)
+        );
+    }
 }