Bind app sessions to the platform auth session.

Clear local sessions when auth.ladill.com signs out and ping the platform session from keepalive.

Co-authored-by: Cursor <cursoragent@cursor.com>

routes/web.php

@@ -24,6 +24,7 @@ Route::get('/sso/callback', [SsoLoginController::class, 'callback'])->name('sso.
 Route::post('/logout', [SsoLoginController::class, 'logout'])->name('logout');
 Route::get('/sso/logout-bridge', [SsoLoginController::class, 'logoutBridge'])->name('sso.logout-bridge');
 Route::get('/sso/logout-frontchannel', [SsoLoginController::class, 'frontchannelLogout'])->name('sso.logout-frontchannel');
+Route::get('/sso/platform-signed-out', [SsoLoginController::class, 'platformSignedOut'])->name('sso.platform-signed-out');
 Route::get('/signed-out', fn () => auth()->check() ? redirect()->route('mini.dashboard') : view('mini.signed-out'))->name('mini.signed-out');
 
 Route::get('/q/{shortCode}', [QrScanController::class, 'resolve'])->name('qr.public.resolve');
@@ -31,7 +32,7 @@ Route::get('/q/{shortCode}/payment-logo', [QrScanController::class, 'paymentLogo
 Route::post('/q/{shortCode}/pay', [PaymentController::class, 'pay'])->name('qr.public.payment.pay');
 Route::get('/q/{shortCode}/pay/callback', [PaymentController::class, 'callback'])->name('qr.public.payment.callback');
 
-Route::middleware(['auth'])->group(function () {
+Route::middleware(['auth', 'platform.session'])->group(function () {
     Route::get('/notifications', [NotificationController::class, 'index'])->name('notifications.index');
     Route::get('/notifications/unread', [NotificationController::class, 'unread'])->name('notifications.unread');
     Route::post('/notifications/{id}/read', [NotificationController::class, 'markAsRead'])->name('notifications.mark-read');