Faza 2: multi-tenancy + Filament dual panels + seed PSauto

Schema centrală:
- companies (slug unique, status, plan_id, settings JSON, trial/active dates)
- super_admins (operator platform)
- plans (free/basic/pro)

Schema tenant (toate cu company_id NOT NULL):
- users (UNIQUE company_id+email)
- clients
- vehicles

Tenancy core:
- App\Tenancy\TenantManager singleton
- App\Models\Concerns\BelongsToTenant trait + TenantScope
- ResolveTenant middleware (slug → Company, 404 pentru rezervate/missing)
- CheckTenantStatus middleware (suspended/expired/archived)
- Fail-safe: TenantScope returns 0 rows când tenant nu e rezolvat

Auth guards:
- 'central' guard cu super_admins provider (panou platform)
- 'web' guard cu users provider (per-tenant)

Filament panels:
- CentralPanelProvider la service.mir.md/admin
- TenantPanelProvider la <slug>.service.mir.md/app
- CompanyResource (central): CRUD companii cu status badge + filtre
- ClientResource (tenant): CRUD clienți cu status, sursă, sold
- VehicleResource (tenant): CRUD mașini cu marcă/model/VIN

Seed:
- 3 plans (free/basic/pro)
- super-admin: vasyka.moraru@gmail.com / admin123
- demo company 'psauto' cu admin user admin@psauto.md / admin123
- 3 clienți + 3 mașini preluate din AutoCRM.html

Bootstrap:
- TrustProxies (Cloudflare→Traefik HTTPS detection)
- forceScheme/forceRootUrl când APP_URL e HTTPS
- Helper global tenant() în app/helpers.php (autoload via composer)
- RUN_SEED env var în entrypoint pentru db:seed condiționat

database/migrations/2026_05_05_000010_create_users_table.php

@@ -0,0 +1,59 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('users', function (Blueprint $t) {
+            $t->id();
+            $t->foreignId('company_id')->constrained('companies')->cascadeOnDelete();
+
+            $t->string('name');
+            $t->string('email');
+            $t->string('phone')->nullable();
+            $t->string('avatar_url')->nullable();
+
+            $t->string('role')->default('user');     // admin / manager / receptionist / mechanic / user
+            $t->string('status')->default('active'); // active / inactive / blocked
+            $t->string('locale', 5)->default('ro');
+
+            $t->timestamp('email_verified_at')->nullable();
+            $t->string('password');
+            $t->timestamp('last_login_at')->nullable();
+            $t->rememberToken();
+            $t->timestamps();
+            $t->softDeletes();
+
+            // CRITIC: same email can exist across tenants but unique within tenant.
+            $t->unique(['company_id', 'email']);
+            $t->index(['company_id', 'role']);
+            $t->index(['company_id', 'status']);
+        });
+
+        Schema::create('password_reset_tokens', function (Blueprint $t) {
+            $t->string('email')->primary();
+            $t->string('token');
+            $t->timestamp('created_at')->nullable();
+        });
+
+        Schema::create('sessions', function (Blueprint $t) {
+            $t->string('id')->primary();
+            $t->foreignId('user_id')->nullable()->index();
+            $t->string('ip_address', 45)->nullable();
+            $t->text('user_agent')->nullable();
+            $t->longText('payload');
+            $t->integer('last_activity')->index();
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('sessions');
+        Schema::dropIfExists('password_reset_tokens');
+        Schema::dropIfExists('users');
+    }
+};