Initial commit: OAuth IAM Laravel application

Laravel-based OAuth/IAM service with Passport, Vue 3 frontend, and
Docker Compose setup for local and production deployment.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

app/Http/Controllers/Api/AppController.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Routing\Controllers\HasMiddleware;
+use Illuminate\Routing\Controllers\Middleware;
+use Laravel\Passport\Client;
+use Laravel\Passport\Http\Middleware\CheckToken;
+use OpenApi\Attributes as OA;
+
+class AppController extends Controller implements HasMiddleware
+{
+    public static function middleware(): array
+    {
+        return [new Middleware(CheckToken::using('users:read'))];
+    }
+
+    #[OA\Get(
+        path: '/apps',
+        summary: 'Listar todas las apps (clientes OAuth) registradas en el sistema',
+        description: 'Requiere el permiso users.view (o un token client_credentials, que actúa como servicio de confianza). Se usa para armar el selector de "roles por app".',
+        security: [['oauth2' => ['users:read']]],
+        tags: ['Users'],
+        responses: [
+            new OA\Response(response: 200, description: 'Listado de apps'),
+            new OA\Response(response: 403, description: 'Sin permiso users.view'),
+        ]
+    )]
+    public function index(Request $request)
+    {
+        $actor = $request->user('api');
+
+        abort_if($actor && ! $actor->can('users.view'), 403);
+
+        return response()->json(
+            Client::query()->where('revoked', false)->orderBy('name')->get(['id', 'name'])
+        );
+    }
+}