Added opaque join-token support across backend and frontend: new migration/model/service/endpoints, guest controllers now resolve tokens, and the demo seeder seeds a token. Tenant event details list/manage tokens with copy/revoke actions, and the guest PWA uses tokens end-to-end (routing, storage, uploads, achievements, etc.). Docs TODO updated to reflect completed steps.

app/Models/Event.php

@@ -58,6 +58,11 @@ class Event extends Model
         return $this->belongsTo(EventPackage::class);
     }
 
+    public function joinTokens(): HasMany
+    {
+        return $this->hasMany(EventJoinToken::class);
+    }
+
     public function hasActivePackage(): bool
     {
         return $this->eventPackage && $this->eventPackage->isActive();