Initial Ladill Frontdesk release with deploy pipeline.

Visitor management app with SSO, kiosk, badges, reports, and Gitea CI deploy to frontdesk.ladill.com.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Http/Controllers/Api/DeviceHeartbeatController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use App\Services\Frontdesk\DeviceService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class DeviceHeartbeatController extends Controller
+{
+    public function __invoke(Request $request, DeviceService $devices): JsonResponse
+    {
+        $token = $request->header('X-Device-Token') ?? $request->input('token');
+        abort_unless(is_string($token) && $token !== '', 422, 'Device token required.');
+
+        $device = $devices->findByToken($token);
+        abort_unless($device, 404);
+
+        $devices->recordHeartbeat($device);
+
+        return response()->json([
+            'status' => 'online',
+            'last_online_at' => $device->fresh()->last_online_at?->toIso8601String(),
+        ]);
+    }
+}