feat: harden admin auth and ticket workflows

- add rotating admin refresh tokens and password gates\n- expand ticket galleries, exports, and client resources\n- improve IP allocation auditing and dashboard data\n- enforce encrypted client access tokens on public routes

app/Http/Controllers/Api/Transaction/ManualDepositController.php

@@ -314,7 +314,7 @@ class ManualDepositController extends Controller
 
             Mail::to($adminEmail)->send(new ManualDepositPendingNotification([
                 'company_name' => $settingValue['company'] ?? config('app.name', 'Portal Admin'),
-                'customer_name' => $customer->fullname ?: trim(($customer->firstname ?? '') . ' ' . ($customer->lastname ?? '')),
+                'customer_name' => (string) $customer->fullname,
                 'customer_email' => $customer->email,
                 'customer_phone' => $customer->phone ?? null,
                 'client_ip' => $request->ip(),