Expand Link app with analytics, settings, and custom domains.

Add Bitly-style branded domain support via Ladill Domains SSL API,
account analytics dashboard, settings page with default domain picker,
and fix SSO/dashboard issues from QR Plus template leftovers.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Models/User.php

@@ -8,6 +8,7 @@ use Illuminate\Database\Eloquent\Relations\HasMany;
 use Illuminate\Database\Eloquent\Relations\HasOne;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Illuminate\Support\Collection;
 use Laravel\Sanctum\HasApiTokens;
 
 /**
@@ -27,6 +28,17 @@ class User extends Authenticatable
         return ['email_verified_at' => 'datetime', 'password' => 'hashed'];
     }
 
+    public function canAccessAccount(int $accountId): bool
+    {
+        return $accountId === $this->id;
+    }
+
+    /** @return Collection<int, User> */
+    public function accessibleAccounts(): Collection
+    {
+        return collect([$this]);
+    }
+
     public function linkWallet(): HasOne
     {
         return $this->hasOne(LinkWallet::class);
@@ -37,6 +49,25 @@ class User extends Authenticatable
         return $this->hasMany(ShortLink::class);
     }
 
+    public function linkCustomDomains(): HasMany
+    {
+        return $this->hasMany(LinkCustomDomain::class);
+    }
+
+    public function defaultLinkDomain(): ?LinkCustomDomain
+    {
+        return $this->linkCustomDomains()
+            ->where('is_default', true)
+            ->where('status', LinkCustomDomain::STATUS_ACTIVE)
+            ->where('ssl_status', LinkCustomDomain::STATUS_ACTIVE)
+            ->first();
+    }
+
+    public function publicLinkBaseUrl(): string
+    {
+        return $this->defaultLinkDomain()?->baseUrl() ?? ShortLink::publicBaseUrl();
+    }
+
     public function getOrCreateLinkWallet(): LinkWallet
     {
         return $this->linkWallet()->firstOrCreate(