Faza 2: multi-tenancy + Filament dual panels + seed PSauto

Schema centrală:
- companies (slug unique, status, plan_id, settings JSON, trial/active dates)
- super_admins (operator platform)
- plans (free/basic/pro)

Schema tenant (toate cu company_id NOT NULL):
- users (UNIQUE company_id+email)
- clients
- vehicles

Tenancy core:
- App\Tenancy\TenantManager singleton
- App\Models\Concerns\BelongsToTenant trait + TenantScope
- ResolveTenant middleware (slug → Company, 404 pentru rezervate/missing)
- CheckTenantStatus middleware (suspended/expired/archived)
- Fail-safe: TenantScope returns 0 rows când tenant nu e rezolvat

Auth guards:
- 'central' guard cu super_admins provider (panou platform)
- 'web' guard cu users provider (per-tenant)

Filament panels:
- CentralPanelProvider la service.mir.md/admin
- TenantPanelProvider la <slug>.service.mir.md/app
- CompanyResource (central): CRUD companii cu status badge + filtre
- ClientResource (tenant): CRUD clienți cu status, sursă, sold
- VehicleResource (tenant): CRUD mașini cu marcă/model/VIN

Seed:
- 3 plans (free/basic/pro)
- super-admin: vasyka.moraru@gmail.com / admin123
- demo company 'psauto' cu admin user admin@psauto.md / admin123
- 3 clienți + 3 mașini preluate din AutoCRM.html

Bootstrap:
- TrustProxies (Cloudflare→Traefik HTTPS detection)
- forceScheme/forceRootUrl când APP_URL e HTTPS
- Helper global tenant() în app/helpers.php (autoload via composer)
- RUN_SEED env var în entrypoint pentru db:seed condiționat

app/Models/Central/Company.php

@@ -0,0 +1,81 @@
+<?php
+
+namespace App\Models\Central;
+
+use App\Models\Tenant\User;
+use Illuminate\Database\Eloquent\SoftDeletes;
+use Stancl\Tenancy\Database\Models\Tenant as BaseTenant;
+use Stancl\Tenancy\Contracts\TenantWithDatabase;
+use Stancl\Tenancy\Database\Concerns\HasDatabase;
+use Stancl\Tenancy\Database\Concerns\HasDomains;
+
+/**
+ * Tenant model — extends Stancl Tenant for compatibility with the package
+ * (so we can use stancl helpers later if we want to switch to multi-DB).
+ *
+ * In single-DB mode we don't use HasDatabase. Domain identification is
+ * handled by our own ResolveTenant middleware (slug-based, not DNS records).
+ */
+class Company extends BaseTenant
+{
+    use SoftDeletes;
+
+    protected $table = 'companies';
+
+    public $incrementing = true;
+
+    protected $guarded = [];
+
+    protected $casts = [
+        'settings' => 'array',
+        'data' => 'array',
+        'trial_ends_at' => 'datetime',
+        'active_until' => 'datetime',
+    ];
+
+    /** Stancl expects this to know what columns are NOT in the JSON `data` blob. */
+    public static function getCustomColumns(): array
+    {
+        return [
+            'id',
+            'slug', 'name', 'display_name', 'city', 'phone', 'email', 'contact_name',
+            'status', 'plan_id',
+            'trial_ends_at', 'active_until',
+            'settings',
+            'created_at', 'updated_at', 'deleted_at',
+        ];
+    }
+
+    public function plan()
+    {
+        return $this->belongsTo(Plan::class);
+    }
+
+    public function users()
+    {
+        return $this->hasMany(User::class);
+    }
+
+    public function isActive(): bool
+    {
+        return in_array($this->status, ['active', 'trial'], true);
+    }
+
+    public function isAccessible(): bool
+    {
+        if ($this->status === 'archived' || $this->status === 'suspended') {
+            return false;
+        }
+        if ($this->status === 'expired') {
+            return false;
+        }
+        return true;
+    }
+
+    /** Get the URL for this tenant. */
+    public function url(?string $path = '/'): string
+    {
+        $central = config('app.central_domain') ?: 'service.mir.md';
+        return "https://{$this->slug}.{$central}{$path}";
+    }
+}

app/Models/Central/Plan.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Models\Central;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Plan extends Model
+{
+    protected $fillable = [
+        'slug', 'name', 'price_monthly', 'price_yearly', 'currency',
+        'features', 'limits', 'is_active', 'is_public',
+    ];
+
+    protected $casts = [
+        'features' => 'array',
+        'limits' => 'array',
+        'is_active' => 'boolean',
+        'is_public' => 'boolean',
+        'price_monthly' => 'decimal:2',
+        'price_yearly' => 'decimal:2',
+    ];
+
+    public function companies()
+    {
+        return $this->hasMany(Company::class);
+    }
+}

app/Models/Central/SuperAdmin.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Models\Central;
+
+use Filament\Models\Contracts\FilamentUser;
+use Filament\Panel;
+use Illuminate\Contracts\Auth\MustVerifyEmail;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Notifications\Notifiable;
+
+class SuperAdmin extends Authenticatable implements FilamentUser
+{
+    use HasFactory, Notifiable;
+
+    protected $table = 'super_admins';
+
+    protected $fillable = [
+        'name', 'email', 'password', 'is_active', 'last_login_at',
+    ];
+
+    protected $hidden = [
+        'password', 'remember_token',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'email_verified_at' => 'datetime',
+            'last_login_at' => 'datetime',
+            'password' => 'hashed',
+            'is_active' => 'boolean',
+        ];
+    }
+
+    public function canAccessPanel(Panel $panel): bool
+    {
+        return $panel->getId() === 'central' && $this->is_active;
+    }
+}