Hosting dev-access: resolve via central identity API (shadow mode)

Consolidate the inline HostingAccountMember lookups (Overview/Search/Hosting
Product/Afia controllers) into HostingAccessResolver, which can source hosting
developer-access from the monolith's central /identity/hosting/developer-access
(correlating cPanel usernames to local account ids). Shadow mode by default
(HOSTING_CENTRAL_DEV_ACCESS=false): local hosting_account_members stays
authoritative and divergence from central is logged; flip the flag to cut over.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

app/Http/Controllers/Hosting/AfiaController.php

@@ -6,10 +6,10 @@ use App\Http\Controllers\Controller;
 use App\Models\CustomerHostingOrder;
 use App\Models\HostedSite;
 use App\Models\HostingAccount;
-use App\Models\HostingAccountMember;
 use App\Models\HostingProduct;
 use App\Services\Afia\AfiaService;
 use App\Services\Billing\BillingClient;
+use App\Services\Hosting\HostingAccessResolver;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 
@@ -55,9 +55,7 @@ class AfiaController extends Controller
             HostingProduct::TYPE_WORDPRESS,
         ];
 
-        $sharedAccountIds = HostingAccountMember::query()
-            ->where('user_id', $user->id)
-            ->pluck('hosting_account_id');
+        $sharedAccountIds = app(HostingAccessResolver::class)->sharedAccountIds($user);
 
         $accounts = HostingAccount::query()
             ->where(function ($query) use ($user, $sharedAccountIds) {

app/Http/Controllers/Hosting/HostingProductController.php

@@ -5,11 +5,11 @@ namespace App\Http\Controllers\Hosting;
 use App\Http\Controllers\Controller;
 use App\Models\CustomerHostingOrder;
 use App\Models\HostingAccount;
-use App\Models\HostingAccountMember;
 use App\Models\HostingOrder;
 use App\Models\HostingPlanChange;
 use App\Models\HostingProduct;
 use App\Models\RcServiceOrder;
+use App\Services\Hosting\HostingAccessResolver;
 use App\Services\Hosting\HostingOrderFulfillmentService;
 use App\Services\Hosting\HostingPlanChangeService;
 use App\Services\Hosting\HostingRenewalCheckoutService;
@@ -63,9 +63,7 @@ class HostingProductController extends Controller
             ->get();
 
         // Admin-assigned Hosting Accounts
-        $sharedAccountIds = HostingAccountMember::query()
-            ->where('user_id', $user->id)
-            ->pluck('hosting_account_id');
+        $sharedAccountIds = app(HostingAccessResolver::class)->sharedAccountIds($user);
 
         $hostingAccounts = HostingAccount::query()
             ->where(function ($query) use ($user, $sharedAccountIds) {

app/Http/Controllers/Hosting/OverviewController.php

@@ -6,10 +6,10 @@ use App\Http\Controllers\Controller;
 use App\Models\CustomerHostingOrder;
 use App\Models\HostedSite;
 use App\Models\HostingAccount;
-use App\Models\HostingAccountMember;
 use App\Models\HostingOrder;
 use App\Models\HostingProduct;
 use App\Models\User;
+use App\Services\Hosting\HostingAccessResolver;
 use Illuminate\Database\Eloquent\Collection;
 use Illuminate\Support\Collection as SupportCollection;
 use Illuminate\Http\Request;
@@ -100,9 +100,7 @@ class OverviewController extends Controller
     {
         $sharedTypes = $this->sharedTypes();
 
-        $sharedAccountIds = HostingAccountMember::query()
-            ->where('user_id', $user->id)
-            ->pluck('hosting_account_id');
+        $sharedAccountIds = app(HostingAccessResolver::class)->sharedAccountIds($user);
 
         $hostingAccounts = HostingAccount::query()
             ->where(function ($query) use ($user, $sharedAccountIds) {

app/Http/Controllers/Hosting/SearchController.php

@@ -5,8 +5,8 @@ namespace App\Http\Controllers\Hosting;
 use App\Http\Controllers\Controller;
 use App\Models\CustomerHostingOrder;
 use App\Models\HostingAccount;
-use App\Models\HostingAccountMember;
 use App\Models\HostingProduct;
+use App\Services\Hosting\HostingAccessResolver;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\View\View;
@@ -49,9 +49,7 @@ class SearchController extends Controller
             HostingProduct::TYPE_WORDPRESS,
         ];
 
-        $sharedAccountIds = HostingAccountMember::query()
-            ->where('user_id', $user->id)
-            ->pluck('hosting_account_id');
+        $sharedAccountIds = app(HostingAccessResolver::class)->sharedAccountIds($user);
 
         HostingAccount::query()
             ->where(function ($query) use ($user, $sharedAccountIds) {