Deploy 2: 2FA (App + Email) + REST API + CSV import-export + auto backup

- Filament v5 multiFactorAuthentication enabled on both panels (App + Email)
- HasAppAuthentication + HasEmailAuthentication on User and SuperAdmin
- Migration: app_authentication_secret + recovery_codes + email_authentication_at
- Sanctum REST API: /api/v1/login, /me, clients, vehicles, work-orders
- EnsureTokenMatchesTenant middleware blocks cross-tenant token usage
- CsvImportExport service: clients + vehicles bulk via plain CSV
- Import/Export buttons on Client + Vehicle list pages
- ApiTokens page in tenant panel (generate/revoke + last-used)
- BackupAllTenantsCommand + scheduler (daily 03:00, retain 14 days)
- Background scheduler in entrypoint.sh

bootstrap/app.php

@@ -8,6 +8,7 @@ use Illuminate\Http\Request;
 return Application::configure(basePath: dirname(__DIR__))
     ->withRouting(
         web: __DIR__.'/../routes/web.php',
+        api: __DIR__.'/../routes/api.php',
         commands: __DIR__.'/../routes/console.php',
         channels: __DIR__.'/../routes/channels.php',
         health: '/up',
@@ -31,6 +32,13 @@ return Application::configure(basePath: dirname(__DIR__))
             \App\Http\Middleware\CheckTenantStatus::class,
             \App\Http\Middleware\SetLocale::class,
         ]);
+
+        // API routes also need tenant resolution by host so the same
+        // Eloquent TenantScope works.
+        $middleware->api(prepend: [
+            \App\Http\Middleware\ResolveTenant::class,
+            \App\Http\Middleware\CheckTenantStatus::class,
+        ]);
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         //