feat: add api token management, app class discovery, and enhanced store/app configuration

[dan2k3k4]

Introduces several major features and improvements:

New Features

• API Token Management - New Filament admin resource (ApiTokenResource) for creating and revoking API tokens with granular abilities (instances.read, instances.write, *)
• PolydockAppClassDiscovery Service - Dynamic discovery of Polydock app classes from the classpath, enabling dropdown selection instead of manual class name entry
• Admin Instance Creation - Ability to create app instances directly from the admin panel with full configuration support
• Instance Configuration Fields - App classes can now define instance-specific configuration that gets stored as encrypted PolydockVariables

Store App Enhancements

• Converted polydock_app_class to a searchable dropdown with auto-discovered classes
• Added app_config JSON column for storing app-specific settings
• New Lagoon script configuration fields (post-deploy, pre-upgrade, upgrade, post-upgrade, claim, pre-remove, remove)
• Added Lagoon runtime settings: lagoon_auto_idle and lagoon_production_environment

Store Security Improvements

• Private keys now stored encrypted via PolydockVariables instead of plaintext
• Added derived public key display with validation
• New API middleware EnsureInstancesReadAbility for token ability enforcement

UI Improvements

• Added search functionality to multiple admin tables
• Enhanced table sorting and filtering
• Fixed null value display showing 'N/A' instead of empty values

Bug Fixes

• Improved error logging with full exception context
• Backfill logic for legacy app instances missing runtime defaults
• Fixed AmazeeAiBackendRegionIdExt to return nullable string

[Copilot]

Pull request overview

This PR introduces admin/API features around Sanctum token management, tighter authorization for instance-related API access, and new Lagoon operational tooling/configuration to support richer store/app and instance workflows.

Changes:

• Added Filament admin UI for creating/revoking Sanctum API tokens and enforced instances.read ability via middleware on v1 API routes.
• Improved Polydock engine validation/backfill behavior for instance variables (treat "0" as present; hydrate Lagoon runtime defaults).
• Added new Lagoon console commands (run command across instances, trigger deploy) plus store-app UI fields for Lagoon scripts/runtime settings.

Reviewed changes

Copilot reviewed 24 out of 26 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
tests/Unit/PolydockEngine/PolydockEngineTest.php	Adds unit coverage for required-variable validation edge cases ("0" vs "").
tests/Feature/Filament/CreatePolydockAppInstanceTest.php	Import ordering adjustment for Livewire usage in Filament test.
tests/Feature/Console/Commands/RunLagoonCommandOnAppInstancesTest.php	Adds feature tests for the new “run Lagoon command on instances” console command.
tests/Feature/Api/InstancesApiAuthTest.php	Adds feature tests asserting legacy register endpoints remain public and v1 instance status is token-protected.
routes/api.php	Introduces v1 API route group protected by Sanctum + new ability middleware.
package-lock.json	Updates npm lockfile (notably minimatch and transitive deps).
config/polydock.php	Changes service provider debug configuration.
composer.lock	Updates PHP dependency lockfile for new/updated packages.
composer.json	Adds/bumps Polydock app and Lagoon client dependencies.
app/PolydockServiceProviders/PolydockServiceProviderFTLagoon.php	Improves token fetch error handling + throws on missing token with debug context.
app/PolydockEngine/Engine.php	Overrides required-variable validation and backfills Lagoon runtime defaults during instance processing.
app/Models/User.php	Enables Sanctum API tokens on User model (HasApiTokens).
app/Models/PolydockStoreApp.php	Defaults lagoon_production_environment accessor to main.
app/Http/Middleware/EnsureInstancesReadAbility.php	New middleware enforcing instances.read (or *) token ability.
app/Http/Controllers/Api/RegisterController.php	Ensures result_data is always an array and includes Lagoon metadata fields when available.
app/Filament/Admin/Resources/UserRemoteRegistrationResource/Pages/ViewUserRemoteRegistration.php	Prevents null URL generation when registration has no instance.
app/Filament/Admin/Resources/UserRemoteRegistrationResource.php	Removes unused import.
app/Filament/Admin/Resources/PolydockStoreAppResource/Pages/EditPolydockStoreApp.php	Loads/persists Lagoon runtime settings into app_config.
app/Filament/Admin/Resources/PolydockStoreAppResource/Pages/CreatePolydockStoreApp.php	Persists Lagoon runtime defaults into app_config on create.
app/Filament/Admin/Resources/PolydockStoreAppResource.php	Adds Lagoon script configuration + runtime settings fields and displays runtime settings in infolist.
app/Filament/Admin/Resources/PolydockAppInstanceResource/Pages/ViewPolydockAppInstance.php	Adds “Trigger Deploy” action and displays last deployment date via Lagoon API/DB fallback.
app/Filament/Admin/Resources/ApiTokenResource/Pages/ListApiTokens.php	Adds token creation modal/action within token list page.
app/Filament/Admin/Resources/ApiTokenResource.php	New Filament resource listing/revoking Sanctum personal access tokens for Users.
app/Console/Commands/TriggerLagoonDeployOnAppInstances.php	New command to trigger Lagoon deploys across running instances (serial + intended concurrency).
app/Console/Commands/TriggerLagoonDeployOnAppInstance.php	New command to trigger Lagoon deploy on a single instance.
app/Console/Commands/RunLagoonCommandOnAppInstances.php	New command to run an allowlisted Lagoon command across running instances (serial + concurrency worker mode).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

This PR introduces Sanctum-based API token management and begins protecting new versioned API endpoints with ability checks, while also extending store/app configuration (notably Lagoon runtime settings and scripts) and updating Lagoon command execution/authentication behavior.

Changes:

• Add Filament admin UI for creating/revoking Sanctum API tokens and introduce instances.read ability enforcement middleware.
• Add/adjust v1 API routing and tests around authentication/authorization behavior.
• Extend store app configuration (Lagoon runtime + scripts) and refactor Lagoon console commands to fetch tokens via SSH/config.

Reviewed changes

Copilot reviewed 19 out of 20 changed files in this pull request and generated 15 comments.

Show a summary per file

File	Description
tests/Unit/PolydockEngine/PolydockEngineTest.php	Adds validation coverage for required variables, including "0" vs empty string.
tests/Feature/Console/Commands/RunLagoonCommandOnAppInstancesTest.php	Updates Lagoon command tests to use a temp SSH key path and a token fetcher binding.
tests/Feature/Api/InstancesApiAuthTest.php	Adds API auth tests for v1 instance status access control.
routes/api.php	Adds a /v1 route group protected by Sanctum + ability middleware.
composer.json	Adds amazeeio/polydock-app-amazeeclaw and loosens a Polydock app dependency constraint.
composer.lock	Locks new dependency and updates multiple packages.
app/Models/User.php	Enables Sanctum token creation via HasApiTokens.
app/Models/PolydockStoreApp.php	Changes Lagoon production environment default behavior.
app/Http/Middleware/EnsureInstancesReadAbility.php	New middleware enforcing instances.read (or *) ability.
app/Http/Controllers/Api/RegisterController.php	Enriches showRegister response result_data with Lagoon metadata.
app/Filament/Admin/Resources/UserRemoteRegistrationResource/Pages/ViewUserRemoteRegistration.php	Avoids generating a URL when the app instance is missing.
app/Filament/Admin/Resources/PolydockStoreAppResource/Pages/EditPolydockStoreApp.php	Persists Lagoon runtime defaults into app_config on edit.
app/Filament/Admin/Resources/PolydockStoreAppResource/Pages/CreatePolydockStoreApp.php	Persists Lagoon runtime defaults into app_config on create.
app/Filament/Admin/Resources/PolydockStoreAppResource.php	Adds Lagoon scripts + runtime settings to the Filament UI and infolist.
app/Filament/Admin/Resources/PolydockAppInstanceResource/Pages/ViewPolydockAppInstance.php	Adds extra validation in the “Trigger Deploy” action (and new imports).
app/Filament/Admin/Resources/ApiTokenResource/Pages/ListApiTokens.php	Implements token creation modal and one-time token display.
app/Filament/Admin/Resources/ApiTokenResource.php	Adds Filament listing + revoke action for user tokens.
app/Console/Commands/TriggerLagoonDeployOnAppInstances.php	Refactors Lagoon deploy command to build client config and fetch tokens directly.
app/Console/Commands/TriggerLagoonDeployOnAppInstance.php	Same refactor for single-instance deploy.
app/Console/Commands/RunLagoonCommandOnAppInstances.php	Same refactor for running commands across instances and concurrent mode.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.