fix: SetLocale tolerant to early-pipeline missing session

app/Http/Middleware/SetLocale.php

@@ -25,10 +25,13 @@ class SetLocale
 
     private function resolve(Request $request): string
     {
+        // Session may not be started yet on early-stage middleware paths.
+        if ($request->hasSession()) {
             $session = $request->session()->get('locale');
             if ($session && in_array($session, self::SUPPORTED, true)) {
                 return $session;
             }
+        }
 
         $user = Auth::user();
         if ($user && ! empty($user->locale) && in_array($user->locale, self::SUPPORTED, true)) {

app/Providers/Filament/TenantPanelProvider.php

@@ -61,10 +61,10 @@ class TenantPanelProvider extends PanelProvider
                 // unauthenticated → endless redirect to /app/login.
                 ResolveTenant::class,
                 CheckTenantStatus::class,
-                \App\Http\Middleware\SetLocale::class,
                 EncryptCookies::class,
                 AddQueuedCookiesToResponse::class,
                 StartSession::class,
+                \App\Http\Middleware\SetLocale::class,
                 AuthenticateSession::class,
                 ShareErrorsFromSession::class,
                 VerifyCsrfToken::class,