- Wired the checkout wizard for Google “comfort login”: added Socialite controller + dependency, new Google env

hooks in config/services.php/.env.example, and updated wizard steps/controllers to store session payloads,
attach packages, and surface localized success/error states.
- Retooled payment handling for both Stripe and PayPal, adding richer status management in CheckoutController/
PayPalController, fallback flows in the wizard’s PaymentStep.tsx, and fresh feature tests for intent
creation, webhooks, and the wizard CTA.
- Introduced a consent-aware Matomo analytics stack: new consent context, cookie-banner UI, useAnalytics/
useCtaExperiment hooks, and MatomoTracker component, then instrumented marketing pages (Home, Packages,
Checkout) with localized copy and experiment tracking.
- Polished package presentation across marketing UIs by centralizing formatting in PresentsPackages, surfacing
localized description tables/placeholders, tuning badges/layouts, and syncing guest/marketing translations.
- Expanded docs & reference material (docs/prp/*, TODOs, public gallery overview) and added a Playwright smoke
test for the hero CTA while reconciling outstanding checklist items.

tests/Unit/TenantPolicyTest.php

@@ -0,0 +1,72 @@
+<?php
+
+namespace Tests\Unit;
+
+use App\Models\Tenant;
+use App\Models\User;
+use App\Policies\TenantPolicy;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
+
+class TenantPolicyTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected TenantPolicy $policy;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        $this->policy = new TenantPolicy();
+    }
+
+    public function test_super_admin_can_adjust_credits(): void
+    {
+        $tenant = Tenant::factory()->create();
+        $user = User::factory()->create([
+            'role' => 'super_admin',
+        ]);
+
+        $this->assertTrue($this->policy->adjustCredits($user, $tenant));
+    }
+
+    public function test_tenant_admin_cannot_adjust_credits(): void
+    {
+        $tenant = Tenant::factory()->create();
+        $user = User::factory()->create([
+            'role' => 'tenant_admin',
+        ]);
+
+        $user->forceFill(['tenant_id' => $tenant->id])->save();
+
+        $this->assertFalse($this->policy->adjustCredits($user, $tenant));
+    }
+
+    public function test_tenant_admin_can_view_own_tenant(): void
+    {
+        $tenant = Tenant::factory()->create();
+        $user = User::factory()->create([
+            'role' => 'tenant_admin',
+        ]);
+
+        $user->forceFill(['tenant_id' => $tenant->id])->save();
+
+        $this->assertTrue($this->policy->view($user, $tenant));
+    }
+
+    public function test_tenant_admin_cannot_view_other_tenant(): void
+    {
+        $tenant = Tenant::factory()->create();
+        $otherTenant = Tenant::factory()->create();
+
+        $user = User::factory()->create([
+            'role' => 'tenant_admin',
+        ]);
+
+        $user->forceFill(['tenant_id' => $tenant->id])->save();
+
+        $this->assertFalse($this->policy->view($user, $otherTenant));
+    }
+}
+