Bind app sessions to the platform auth session.

Clear local sessions when auth.ladill.com signs out and ping the platform session from keepalive.

Co-authored-by: Cursor <cursoragent@cursor.com>

routes/web.php

@@ -25,6 +25,7 @@ Route::get('/sso/callback', [SsoLoginController::class, 'callback'])->name('sso.
 Route::post('/logout', [SsoLoginController::class, 'logout'])->name('logout');
 Route::get('/sso/logout-bridge', [SsoLoginController::class, 'logoutBridge'])->name('sso.logout-bridge');
 Route::get('/sso/logout-frontchannel', [SsoLoginController::class, 'frontchannelLogout'])->name('sso.logout-frontchannel');
+Route::get('/sso/platform-signed-out', [SsoLoginController::class, 'platformSignedOut'])->name('sso.platform-signed-out');
 Route::get('/signed-out', fn () => auth()->check() ? redirect()->route('merchant.dashboard') : view('merchant.signed-out'))->name('merchant.signed-out');
 
 Route::get('/q/{shortCode}', [QrScanController::class, 'resolve'])->name('qr.public.resolve');
@@ -41,7 +42,7 @@ Route::get('/q/{shortCode}/booking/confirmed/{booking}', [BookingController::cla
 Route::post('/q/{shortCode}/order', [SaleOrderController::class, 'store'])->name('qr.public.order');
 Route::get('/q/{shortCode}/order/callback', [SaleOrderController::class, 'callback'])->name('qr.public.order.callback');
 
-Route::middleware(['auth'])->group(function () {
+Route::middleware(['auth', 'platform.session'])->group(function () {
     Route::get('/notifications', [NotificationController::class, 'index'])->name('notifications.index');
     Route::get('/notifications/unread', [NotificationController::class, 'unread'])->name('notifications.unread');
     Route::post('/notifications/{id}/read', [NotificationController::class, 'markAsRead'])->name('notifications.mark-read');