feat(admin): IP pool allocation, billing exports, service attachments

- IP pool: sheet import (xlsx/csv) matched by address, bulk allocate/revoke
  with notification email (ip_allocated/ip_revoked), ip_pool_logs history.
- Orders/invoices: Excel export on branded template (BrandedReportWriter),
  shared billing filters, order item service info in list responses.
- Web design quote Excel export; activity log export.
- Service attachments with copy-to-invoice; deployment invoice attachments.
- Customer email attachments stored on disk and attached by path.
- Admin password change endpoint; user.fullname backfill migration;
  orders.user_id backfill from logs.
- Disable deploy workflow until CI/CD is set up.
- Ignore stored customer email and service attachment uploads.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

routes/api/admin/auth.php

@@ -13,6 +13,8 @@ Route::get('me', [AuthController::class, 'me']);
 
 Route::put('profile', [AuthController::class, 'updateProfile']);
 
+Route::put('password', [AuthController::class, 'updatePassword']);
+
 // Role Permissions
 Route::prefix('role-permissions')->group(function () {
     // Accessible bởi mọi admin — trả về permissions hiệu lực của user hiện tại