- Reworked the tenant admin login page

- Updated the User model to implement Filament’s tenancy contracts
- Seeded a ready-to-use demo tenant (user, tenant, active package, purchase)
- Introduced a branded, translated 403 error page to replace the generic forbidden message for unauthorised admin hits
- Removed the public “Register” links from the marketing header
- hardened join event logic and improved error handling in the guest pwa.

app/Services/Checkout/CheckoutAssignmentService.php

@@ -112,6 +112,9 @@ class CheckoutAssignmentService
     protected function ensureTenant(User $user, CheckoutSession $session): ?Tenant
     {
         if ($user->tenant) {
+            if (! $user->tenant_id) {
+                $user->forceFill(['tenant_id' => $user->tenant->getKey()])->save();
+            }
             return $user->tenant;
         }
 
@@ -130,6 +133,10 @@ class CheckoutAssignmentService
             ],
         ]);
 
+        if ($user->tenant_id !== $tenant->id) {
+            $user->forceFill(['tenant_id' => $tenant->id])->save();
+        }
+
         event(new Registered($user));
 
         return $tenant;