- Wired the checkout wizard for Google “comfort login”: added Socialite controller + dependency, new Google env

hooks in config/services.php/.env.example, and updated wizard steps/controllers to store session payloads,
attach packages, and surface localized success/error states.
- Retooled payment handling for both Stripe and PayPal, adding richer status management in CheckoutController/
PayPalController, fallback flows in the wizard’s PaymentStep.tsx, and fresh feature tests for intent
creation, webhooks, and the wizard CTA.
- Introduced a consent-aware Matomo analytics stack: new consent context, cookie-banner UI, useAnalytics/
useCtaExperiment hooks, and MatomoTracker component, then instrumented marketing pages (Home, Packages,
Checkout) with localized copy and experiment tracking.
- Polished package presentation across marketing UIs by centralizing formatting in PresentsPackages, surfacing
localized description tables/placeholders, tuning badges/layouts, and syncing guest/marketing translations.
- Expanded docs & reference material (docs/prp/*, TODOs, public gallery overview) and added a Playwright smoke
test for the hero CTA while reconciling outstanding checklist items.

config/oauth.php

@@ -0,0 +1,13 @@
+<?php
+
+return [
+    'keys' => [
+        'current_kid' => env('OAUTH_JWT_KID', 'fotospiel-jwt'),
+        'storage_path' => env('OAUTH_KEY_STORE', storage_path('app/oauth-keys')),
+    ],
+    'refresh_tokens' => [
+        'enforce_ip_binding' => env('OAUTH_REFRESH_ENFORCE_IP', true),
+        'allow_subnet_match' => env('OAUTH_REFRESH_ALLOW_SUBNET', false),
+    ],
+];
+