Initial commit: Pireon Admin — headless admin panel and public API

Laravel 13 + Filament 5 admin panel and REST API for a non-profit developer
collective, backed by the Pireon OAuth identity server. The public site is a
separate, server-rendered application consuming /api/public/v1.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

database/migrations/0001_01_01_000000_create_users_table.php

@@ -0,0 +1,69 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('users', function (Blueprint $table) {
+            $table->id();
+
+            // Identity mirrored from the Pireon OAuth2 server. `oauth_id` is the
+            // remote primary key and the only stable join key between the two
+            // systems — emails can be changed upstream.
+            $table->unsignedBigInteger('oauth_id')->nullable()->unique();
+
+            $table->string('name');
+            $table->string('email')->unique();
+            $table->timestamp('email_verified_at')->nullable();
+
+            // Nullable: users authenticate against the identity server, so most
+            // accounts never hold a local password hash.
+            $table->string('password')->nullable();
+
+            $table->string('avatar_url')->nullable();
+            $table->string('locale', 5)->nullable();
+            $table->boolean('is_active')->default(true);
+
+            // Roles reported by the identity server. Stored for reference and
+            // support only — they never grant anything here, because this app
+            // resolves authorisation from its own spatie roles/permissions.
+            $table->jsonb('remote_roles')->nullable();
+
+            $table->timestamp('last_login_at')->nullable();
+            $table->rememberToken();
+            $table->timestamps();
+        });
+
+        Schema::create('password_reset_tokens', function (Blueprint $table) {
+            $table->string('email')->primary();
+            $table->string('token');
+            $table->timestamp('created_at')->nullable();
+        });
+
+        Schema::create('sessions', function (Blueprint $table) {
+            $table->string('id')->primary();
+            $table->foreignId('user_id')->nullable()->index();
+            $table->string('ip_address', 45)->nullable();
+            $table->text('user_agent')->nullable();
+            $table->longText('payload');
+            $table->integer('last_activity')->index();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('users');
+        Schema::dropIfExists('password_reset_tokens');
+        Schema::dropIfExists('sessions');
+    }
+};