- Reworked the tenant admin login page

- Updated the User model to implement Filament’s tenancy contracts
- Seeded a ready-to-use demo tenant (user, tenant, active package, purchase)
- Introduced a branded, translated 403 error page to replace the generic forbidden message for unauthorised admin hits
- Removed the public “Register” links from the marketing header
- hardened join event logic and improved error handling in the guest pwa.

docs/prp/03-api.md

@@ -19,10 +19,10 @@ Key Endpoints (abridged)
 - Settings: read/update tenant theme, limits, legal page links.
 
 Guest Polling (no WebSockets in v1)
-- GET `/events/{slug}/stats` — lightweight counters for Home info bar.
+- GET `/events/{token}/stats` — lightweight counters for Home info bar.
   - Response: `{ online_guests: number, tasks_solved: number, latest_photo_at: ISO8601 }`.
   - Cache: `Cache-Control: no-store`; include `ETag` for conditional requests.
-- GET `/events/{slug}/photos?since=<ISO8601|cursor>` — incremental gallery refresh.
+- GET `/events/{token}/photos?since=<ISO8601|cursor>` — incremental gallery refresh.
   - Response: `{ data: Photo[], next_cursor?: string, latest_photo_at: ISO8601 }`.
   - Use `If-None-Match` or `If-Modified-Since` to return `304 Not Modified` when unchanged.