refactor: align codebase with EventCrew domain and trim legacy band stack

- Update API: events, users, policies, routes, resources, migrations
- Remove deprecated models/resources (customers, setlists, invitations, etc.)
- Refresh admin app and docs; remove apps/band

Made-with: Cursor

api/config/cors.php

@@ -22,9 +22,9 @@ return [
     'allowed_methods' => ['*'],
 
     'allowed_origins' => [
-        'http://localhost:5173', // Admin SPA
-        'http://localhost:5174', // Band SPA
-        'http://localhost:5175', // Customer SPA
+        env('FRONTEND_ADMIN_URL', 'http://localhost:5173'),
+        env('FRONTEND_APP_URL', 'http://localhost:5174'),
+        env('FRONTEND_PORTAL_URL', 'http://localhost:5175'),
     ],
 
     'allowed_origins_patterns' => [],