Reverb infra + Kanban live refresh

- laravel/reverb instalat + reverb:install (config/reverb.php, channels.php)
- routes/channels.php: tenant.{slug} private channel cu auth check
  user.company_id == tenant.id
- App\Events\WorkOrderUpdated implements ShouldBroadcast pe
  PrivateChannel('tenant.{slug}'); broadcastAs 'work-order.updated'
- WorkOrder::booted dispatch event la fiecare update (skip if broadcast=log)
- Filament panel BODY_END inject:
  - Pusher JS de la CDN (compatibil Reverb)
  - Echo client conectat la Reverb (config dinamic din env)
  - Subscribe pe tenant private channel; la 'work-order.updated' →
    Livewire.all().forEach($refresh)
- Kanban view: wire:poll.5s (live refresh fallback) +
  x-on:autocrm:wo-updated.window=$refresh (instant când WS e activ)

Pentru moment BROADCAST_CONNECTION=log în Coolify (Reverb nu e deployat).
Când deployezi Reverb container separat:
  Coolify → New App → Same repo → CMD override:
    php artisan reverb:start --host=0.0.0.0 --port=8080
  → FQDN: ws.service.mir.md:8080
  → Set BROADCAST_CONNECTION=reverb pe AutoCRM app
  → Real-time instant fără cod nou.

app/Providers/Filament/TenantPanelProvider.php

@@ -130,7 +130,15 @@ class TenantPanelProvider extends PanelProvider
             )
             ->renderHook(
                 PanelsRenderHook::BODY_END,
-                fn (): string => <<<'HTML'
+                fn (): string => Blade::render(<<<'BLADE'
+                    @php
+                        $tenant = app(\App\Tenancy\TenantManager::class)->current();
+                        $reverbKey = config('broadcasting.connections.reverb.key');
+                        $reverbHost = config('broadcasting.connections.reverb.options.host');
+                        $reverbPort = config('broadcasting.connections.reverb.options.port');
+                        $reverbScheme = config('broadcasting.connections.reverb.options.scheme', 'https');
+                        $broadcastEnabled = config('broadcasting.default') === 'reverb' && $reverbKey && $reverbHost;
+                    @endphp
                     <script>
                     if ('serviceWorker' in navigator) {
                         window.addEventListener('load', () => {
@@ -138,7 +146,38 @@ class TenantPanelProvider extends PanelProvider
                         });
                     }
                     </script>
-                HTML
+                    @if ($broadcastEnabled && $tenant)
+                        <script src="https://js.pusher.com/8.4/pusher.min.js"></script>
+                        <script>
+                            (function() {
+                                if (typeof Pusher === 'undefined') return;
+                                Pusher.logToConsole = false;
+                                window.AutoCRMEcho = new Pusher('{{ $reverbKey }}', {
+                                    wsHost: '{{ $reverbHost }}',
+                                    wsPort: {{ $reverbPort ?: ($reverbScheme === 'https' ? 443 : 80) }},
+                                    wssPort: {{ $reverbPort ?: 443 }},
+                                    forceTLS: {{ $reverbScheme === 'https' ? 'true' : 'false' }},
+                                    enabledTransports: ['ws', 'wss'],
+                                    cluster: 'mt1',
+                                    authEndpoint: '/broadcasting/auth',
+                                    auth: {
+                                        headers: {
+                                            'X-CSRF-TOKEN': document.querySelector('meta[name="csrf-token"]')?.content || ''
+                                        }
+                                    }
+                                });
+                                const ch = window.AutoCRMEcho.subscribe('private-tenant.{{ $tenant->slug }}');
+                                ch.bind('work-order.updated', function(payload) {
+                                    window.dispatchEvent(new CustomEvent('autocrm:wo-updated', { detail: payload }));
+                                    // If we're on the kanban or a WO list page, refresh the Livewire component.
+                                    if (typeof Livewire !== 'undefined') {
+                                        Livewire.all().forEach(c => c.$refresh && c.$refresh());
+                                    }
+                                });
+                            })();
+                        </script>
+                    @endif
+                BLADE)
             );
     }
 }