- Reworked the tenant admin login page

- Updated the User model to implement Filament’s tenancy contracts
- Seeded a ready-to-use demo tenant (user, tenant, active package, purchase)
- Introduced a branded, translated 403 error page to replace the generic forbidden message for unauthorised admin hits
- Removed the public “Register” links from the marketing header
- hardened join event logic and improved error handling in the guest pwa.

app/Services/EventJoinTokenService.php

@@ -58,22 +58,29 @@ class EventJoinTokenService
         $joinToken->increment('usage_count');
     }
 
-    public function findActiveToken(string $token): ?EventJoinToken
+    public function findToken(string $token, bool $includeInactive = false): ?EventJoinToken
     {
         return EventJoinToken::query()
             ->where('token', $token)
-            ->whereNull('revoked_at')
-            ->where(function ($query) {
-                $query->whereNull('expires_at')
-                    ->orWhere('expires_at', '>', now());
-            })
-            ->where(function ($query) {
-                $query->whereNull('usage_limit')
-                    ->orWhereColumn('usage_limit', '>', 'usage_count');
+            ->when(! $includeInactive, function ($query) {
+                $query->whereNull('revoked_at')
+                    ->where(function ($query) {
+                        $query->whereNull('expires_at')
+                            ->orWhere('expires_at', '>', now());
+                    })
+                    ->where(function ($query) {
+                        $query->whereNull('usage_limit')
+                            ->orWhereColumn('usage_limit', '>', 'usage_count');
+                    });
             })
             ->first();
     }
 
+    public function findActiveToken(string $token): ?EventJoinToken
+    {
+        return $this->findToken($token);
+    }
+
     protected function generateUniqueToken(int $length = 48): string
     {
         do {