feat(admin): IP pool allocation, billing exports, service attachments

- IP pool: sheet import (xlsx/csv) matched by address, bulk allocate/revoke
  with notification email (ip_allocated/ip_revoked), ip_pool_logs history.
- Orders/invoices: Excel export on branded template (BrandedReportWriter),
  shared billing filters, order item service info in list responses.
- Web design quote Excel export; activity log export.
- Service attachments with copy-to-invoice; deployment invoice attachments.
- Customer email attachments stored on disk and attached by path.
- Admin password change endpoint; user.fullname backfill migration;
  orders.user_id backfill from logs.
- Disable deploy workflow until CI/CD is set up.
- Ignore stored customer email and service attachment uploads.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

app/Jobs/VirtualMachine/ChangeIpVMJob.php

@@ -6,6 +6,7 @@ namespace App\Jobs\VirtualMachine;
 
 use App\Actions\VM\ChangeIpVMAction;
 use App\Http\Services\Telegram;
+use App\Models\IpPoolLog;
 use App\Models\ModuleVmware;
 use App\Services\VirtualMachine\VmIpReservationService;
 use Illuminate\Bus\Queueable;
@@ -79,8 +80,10 @@ class ChangeIpVMJob implements ShouldQueue
             }
         } else {
             $vm->update(['ip' => $this->ipAddress, 'dns' => $this->dns]);
+            IpPoolLog::recordVm($this->newIpPoolId, IpPoolLog::VM_ASSIGNED, 'free', $vm, 'Đổi IP VM');
             if ($this->oldIpPoolId) {
                 $ipReservation->releaseByPoolId($this->oldIpPoolId);
+                IpPoolLog::recordVm($this->oldIpPoolId, IpPoolLog::VM_RELEASED, 'assigned', $vm, 'Đổi IP VM sang ' . $this->ipAddress);
             }
         }
 

app/Jobs/VirtualMachine/Provision/Concerns/ManagesIpReservation.php

@@ -4,6 +4,7 @@ namespace App\Jobs\VirtualMachine\Provision\Concerns;
 
 use App\Models\IpPool;
 use App\Models\ModuleIpAddress;
+use App\Models\IpPoolLog;
 use App\Models\ModuleVmware;
 use App\Models\Service;
 use App\Models\VirtualMachines;
@@ -164,10 +165,12 @@ trait ManagesIpReservation
 
             // Flip ip_pools row to assigned and link service
             if ($ipPoolId) {
+                $statusFrom = (string) IpPool::whereKey($ipPoolId)->value('status');
                 IpPool::where('id', $ipPoolId)->update([
                     'status'     => 'assigned',
                     'service_id' => $serviceId,
                 ]);
+                IpPoolLog::recordVm($ipPoolId, IpPoolLog::VM_ASSIGNED, $statusFrom, $moduleVmware, 'Tạo VM');
             }
 
             // Touch services row so server_name reflects the provisioned VM.