Initial Ladill Hosting app with Gitea deploy pipeline.

Shared web hosting extracted from the platform monolith, with CI deploy
to /var/www/ladill-hosting matching Bird/Domains/Email.

Co-authored-by: Cursor <cursoragent@cursor.com>

config/services.php

@@ -0,0 +1,62 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Third Party Services
+    |--------------------------------------------------------------------------
+    |
+    | This file is for storing the credentials for third party services such
+    | as Mailgun, Postmark, AWS and more. This file provides the de facto
+    | location for this type of information, allowing packages to have
+    | a conventional file to locate the various service credentials.
+    |
+    */
+
+    /*
+    | Ladill SSO (OIDC) — this app is a first-party client of the platform
+    | identity provider at auth.ladill.com (Authorization Code + PKCE). Mirrors
+    | the monolith's reference client; redirect points back at this app.
+    */
+    'ladill_sso' => [
+        'issuer' => 'https://'.config('app.auth_domain'),
+        'client_id' => env('LADILL_SSO_CLIENT_ID'),
+        'client_secret' => env('LADILL_SSO_CLIENT_SECRET'),
+        'redirect' => rtrim((string) env('APP_URL', 'https://bird.ladill.com'), '/').'/sso/callback',
+    ],
+
+    'ladill_webmail' => [
+        'url' => env('LADILL_WEBMAIL_URL', 'https://mail.ladill.com'),
+    ],
+
+    'postmark' => [
+        'key' => env('POSTMARK_API_KEY'),
+    ],
+
+    'resend' => [
+        'key' => env('RESEND_API_KEY'),
+    ],
+
+    'ses' => [
+        'key' => env('AWS_ACCESS_KEY_ID'),
+        'secret' => env('AWS_SECRET_ACCESS_KEY'),
+        'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+    ],
+
+    'slack' => [
+        'notifications' => [
+            'bot_user_oauth_token' => env('SLACK_BOT_USER_OAUTH_TOKEN'),
+            'channel' => env('SLACK_BOT_USER_DEFAULT_CHANNEL'),
+        ],
+    ],
+
+    // Paystack — guest checkout (and the card fallback for logged-in buyers).
+    'paystack' => [
+        'base_url' => env('PAYSTACK_BASE_URL', 'https://api.paystack.co'),
+        'public_key' => env('PAYSTACK_PUBLIC_KEY'),
+        'secret_key' => env('PAYSTACK_SECRET_KEY'),
+        'webhook_secret' => env('PAYSTACK_WEBHOOK_SECRET', env('PAYSTACK_SECRET_KEY')),
+    ],
+
+];