- Wired the checkout wizard for Google “comfort login”: added Socialite controller + dependency, new Google env

hooks in config/services.php/.env.example, and updated wizard steps/controllers to store session payloads,
attach packages, and surface localized success/error states.
- Retooled payment handling for both Stripe and PayPal, adding richer status management in CheckoutController/
PayPalController, fallback flows in the wizard’s PaymentStep.tsx, and fresh feature tests for intent
creation, webhooks, and the wizard CTA.
- Introduced a consent-aware Matomo analytics stack: new consent context, cookie-banner UI, useAnalytics/
useCtaExperiment hooks, and MatomoTracker component, then instrumented marketing pages (Home, Packages,
Checkout) with localized copy and experiment tracking.
- Polished package presentation across marketing UIs by centralizing formatting in PresentsPackages, surfacing
localized description tables/placeholders, tuning badges/layouts, and syncing guest/marketing translations.
- Expanded docs & reference material (docs/prp/*, TODOs, public gallery overview) and added a Playwright smoke
test for the hero CTA while reconciling outstanding checklist items.

config/checkout.php

@@ -1,6 +1,8 @@
 <?php
 
 return [
+    'enabled' => (bool) env('CHECKOUT_WIZARD_ENABLED', true),
+    'feature_flag' => env('CHECKOUT_WIZARD_FLAG', 'checkout-wizard-2025'),
     'session_ttl_minutes' => env('CHECKOUT_SESSION_TTL', 30),
     'status_history_max' => env('CHECKOUT_STATUS_HISTORY_MAX', 25),
-];
+];

config/oauth.php

@@ -0,0 +1,13 @@
+<?php
+
+return [
+    'keys' => [
+        'current_kid' => env('OAUTH_JWT_KID', 'fotospiel-jwt'),
+        'storage_path' => env('OAUTH_KEY_STORE', storage_path('app/oauth-keys')),
+    ],
+    'refresh_tokens' => [
+        'enforce_ip_binding' => env('OAUTH_REFRESH_ENFORCE_IP', true),
+        'allow_subnet_match' => env('OAUTH_REFRESH_ALLOW_SUBNET', false),
+    ],
+];
+

config/services.php

@@ -43,6 +43,19 @@ return [
         'sandbox' => env('PAYPAL_SANDBOX', true),
     ],
 
+    'google' => [
+        'client_id' => env('GOOGLE_CLIENT_ID'),
+        'client_secret' => env('GOOGLE_CLIENT_SECRET'),
+        'redirect' => env('GOOGLE_REDIRECT_URI', rtrim(env('APP_URL', ''), '/') . '/checkout/auth/google/callback'),
+    ],
+
+    'revenuecat' => [
+        'webhook' => env('REVENUECAT_WEBHOOK_SECRET', ''),
+        'product_mappings' => env('REVENUECAT_PRODUCT_MAPPINGS', ''),
+        'app_user_prefix' => env('REVENUECAT_APP_USER_PREFIX', 'tenant'),
+        'queue' => env('REVENUECAT_WEBHOOK_QUEUE', 'webhooks'),
+    ],
+
     'oauth' => [
         'tenant_admin' => [
             'id' => env('VITE_OAUTH_CLIENT_ID', 'tenant-admin-app'),