Initial Ladill Frontdesk release with deploy pipeline.

Visitor management app with SSO, kiosk, badges, reports, and Gitea CI deploy to frontdesk.ladill.com.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Http/Middleware/AuthenticateFrontdeskDevice.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Services\Frontdesk\DeviceService;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class AuthenticateFrontdeskDevice
+{
+    public function __construct(
+        protected DeviceService $devices,
+    ) {}
+
+    public function handle(Request $request, Closure $next, string $type = 'kiosk'): Response
+    {
+        $token = $request->route('token') ?? $request->header('X-Device-Token');
+
+        abort_unless(is_string($token) && $token !== '', 404);
+
+        $device = $this->devices->findByToken($token);
+
+        abort_unless($device && $device->type === $type, 404);
+
+        $this->devices->recordHeartbeat($device);
+
+        $request->attributes->set('frontdesk.device', $device->fresh());
+
+        return $next($request);
+    }
+}