- Wired the checkout wizard for Google “comfort login”: added Socialite controller + dependency, new Google env

hooks in config/services.php/.env.example, and updated wizard steps/controllers to store session payloads,
attach packages, and surface localized success/error states.
- Retooled payment handling for both Stripe and PayPal, adding richer status management in CheckoutController/
PayPalController, fallback flows in the wizard’s PaymentStep.tsx, and fresh feature tests for intent
creation, webhooks, and the wizard CTA.
- Introduced a consent-aware Matomo analytics stack: new consent context, cookie-banner UI, useAnalytics/
useCtaExperiment hooks, and MatomoTracker component, then instrumented marketing pages (Home, Packages,
Checkout) with localized copy and experiment tracking.
- Polished package presentation across marketing UIs by centralizing formatting in PresentsPackages, surfacing
localized description tables/placeholders, tuning badges/layouts, and syncing guest/marketing translations.
- Expanded docs & reference material (docs/prp/*, TODOs, public gallery overview) and added a Playwright smoke
test for the hero CTA while reconciling outstanding checklist items.

.env.example

@@ -69,9 +69,23 @@ STRIPE_WEBHOOK_SECRET=
 STRIPE_CONNECT_CLIENT_ID=
 STRIPE_CONNECT_SECRET=
 
+# Google OAuth (Checkout comfort login)
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+GOOGLE_REDIRECT_URI=${APP_URL}/checkout/auth/google/callback
+
 VITE_APP_NAME="${APP_NAME}"
 REVENUECAT_WEBHOOK_SECRET=
 REVENUECAT_PRODUCT_MAPPINGS=
 REVENUECAT_APP_USER_PREFIX=tenant
+REVENUECAT_WEBHOOK_QUEUE=webhooks
+
+CHECKOUT_WIZARD_ENABLED=true
+CHECKOUT_WIZARD_FLAG=checkout-wizard-2025
+
+OAUTH_JWT_KID=fotospiel-jwt
+OAUTH_KEY_STORE=
+OAUTH_REFRESH_ENFORCE_IP=true
+OAUTH_REFRESH_ALLOW_SUBNET=false