added a help system, replaced the words "tenant" and "Pwa" with better alternatives. corrected and implemented cron jobs. prepared going live on a coolify-powered system.

app/Http/Controllers/Api/Tenant/PhotoboothController.php

@@ -0,0 +1,79 @@
+<?php
+
+namespace App\Http\Controllers\Api\Tenant;
+
+use App\Http\Controllers\Controller;
+use App\Http\Resources\Tenant\PhotoboothStatusResource;
+use App\Models\Event;
+use App\Models\PhotoboothSetting;
+use App\Services\Photobooth\PhotoboothProvisioner;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class PhotoboothController extends Controller
+{
+    public function __construct(private readonly PhotoboothProvisioner $provisioner) {}
+
+    public function show(Request $request, Event $event): PhotoboothStatusResource
+    {
+        $this->assertEventBelongsToTenant($request, $event);
+
+        return $this->resource($event);
+    }
+
+    public function enable(Request $request, Event $event): JsonResponse
+    {
+        $this->assertEventBelongsToTenant($request, $event);
+
+        $event->loadMissing('tenant');
+        $updated = $this->provisioner->enable($event);
+
+        return response()->json([
+            'message' => __('Photobooth-Zugang aktiviert.'),
+            'data' => $this->resource($updated),
+        ]);
+    }
+
+    public function rotate(Request $request, Event $event): JsonResponse
+    {
+        $this->assertEventBelongsToTenant($request, $event);
+
+        $event->loadMissing('tenant');
+        $updated = $this->provisioner->rotate($event);
+
+        return response()->json([
+            'message' => __('Zugangsdaten neu generiert.'),
+            'data' => $this->resource($updated),
+        ]);
+    }
+
+    public function disable(Request $request, Event $event): JsonResponse
+    {
+        $this->assertEventBelongsToTenant($request, $event);
+
+        $event->loadMissing('tenant');
+        $updated = $this->provisioner->disable($event);
+
+        return response()->json([
+            'message' => __('Photobooth-Zugang deaktiviert.'),
+            'data' => $this->resource($updated),
+        ]);
+    }
+
+    protected function resource(Event $event): PhotoboothStatusResource
+    {
+        return PhotoboothStatusResource::make([
+            'event' => $event->fresh(),
+            'settings' => PhotoboothSetting::current(),
+        ]);
+    }
+
+    protected function assertEventBelongsToTenant(Request $request, Event $event): void
+    {
+        $tenantId = (int) $request->attributes->get('tenant_id');
+
+        if ($tenantId !== (int) $event->tenant_id) {
+            abort(403, 'Event gehört nicht zu diesem Tenant.');
+        }
+    }
+}