fix: personal access tokens failed with a 500 in production

Passport needs a "personal access client" to issue personal access tokens,
and only the seeder created it (production runs migrations, not the seeder),
so createToken threw "Personal access client not found".

- New idempotent command passport:ensure-personal-client, run by the
  container entrypoint after the migrations.
- The tokens page now shows an error when the server fails instead of
  doing nothing (es, en, ca).
- Tests: the command creates the client once; tokens can be created.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docker/php/entrypoint.sh

@@ -14,6 +14,9 @@ if [ "$CONTAINER_ROLE" = "app" ]; then
     echo "Aplicando migraciones..."
     su-exec www-data php artisan migrate --force
 
+    echo "Comprobando el cliente de Personal Access Tokens..."
+    su-exec www-data php artisan passport:ensure-personal-client
+
     echo "Cacheando configuración, rutas y vistas..."
     su-exec www-data php artisan config:cache
     su-exec www-data php artisan route:cache