feat: harden admin auth and ticket workflows

- add rotating admin refresh tokens and password gates\n- expand ticket galleries, exports, and client resources\n- improve IP allocation auditing and dashboard data\n- enforce encrypted client access tokens on public routes

app/Http/Services/Hosting.php

@@ -117,7 +117,7 @@ class Hosting
             ])
             ->acceptJson()
             ->post("https://$this->url/api/v2/clients", [
-                'name' => $product_data->Customer->firstname . " " . $product_data->Customer->lastname,
+                'name' => (string) $product_data->Customer->fullname,
                 'company' => $product_data->Customer->company,
                 'login' => $product_data->Customer->email,
                 'email' => $product_data->Customer->email,

app/Http/Services/Telegram.php

@@ -82,7 +82,7 @@ class Telegram
     {
         $msg = "🔔 Yêu cầu nạp tiền chờ duyệt!\n";
         $msg .= "--------------------------------\n";
-        $msg .= "👤 Khách: {$customer->firstname} {$customer->lastname}\n";
+        $msg .= "👤 Khách: {$customer->fullname}\n";
         $msg .= "📧 Email: {$customer->email}\n";
         $msg .= "💵 Số tiền: " . number_format($transaction->amount, 0, ',', '.') . " VNĐ\n";
         $msg .= "🧾 Mã GD: {$transaction->public_code}\n";