Fix tenant event form package selector so it no longer renders empty-value options, handles loading/empty

states, and pulls data from the authenticated /api/v1/tenant/packages endpoint.
    (resources/js/admin/pages/EventFormPage.tsx, resources/js/admin/api.ts)
  - Harden tenant-admin auth flow: prevent PKCE state loss, scope out StrictMode double-processing, add SPA
    routes for /event-admin/login and /event-admin/logout, and tighten token/session clearing semantics (resources/js/admin/auth/{context,tokens}.tsx, resources/js/admin/pages/{AuthCallbackPage,LogoutPage}.tsx,
    resources/js/admin/router.tsx, routes/web.php)

resources/js/guest/router.tsx

@@ -197,8 +197,12 @@ function getErrorContent(
       return build('token_expired', { ctaHref: '/event' });
     case 'token_rate_limited':
       return build('token_rate_limited');
+    case 'access_rate_limited':
+      return build('access_rate_limited');
     case 'event_not_public':
       return build('event_not_public');
+    case 'gallery_expired':
+      return build('gallery_expired', { ctaHref: '/event' });
     case 'network_error':
       return build('network_error');
     case 'server_error':
@@ -219,4 +223,3 @@ function SimpleLayout({ title, children }: { title: string; children: React.Reac
     </div>
   );
 }
-