feat: fase 2 backend — crowd types, persons, sections, shifts, invite flow

- Crowd Types + Persons CRUD (73 tests)
- Festival Sections + Time Slots + Shifts CRUD met assign/claim flow (84 tests)
- Invite Flow + Member Management met InvitationService (109 tests)
- Schema v1.6 migraties volledig uitgevoerd
- DevSeeder bijgewerkt met crowd types voor testorganisatie

api/app/Http/Controllers/Api/V1/FestivalSectionController.php

@@ -0,0 +1,70 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Api\V1\ReorderFestivalSectionsRequest;
+use App\Http\Requests\Api\V1\StoreFestivalSectionRequest;
+use App\Http\Requests\Api\V1\UpdateFestivalSectionRequest;
+use App\Http\Resources\Api\V1\FestivalSectionResource;
+use App\Models\Event;
+use App\Models\FestivalSection;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
+use Illuminate\Support\Facades\Gate;
+
+final class FestivalSectionController extends Controller
+{
+    public function index(Event $event): AnonymousResourceCollection
+    {
+        Gate::authorize('viewAny', [FestivalSection::class, $event]);
+
+        $sections = $event->festivalSections()->ordered()->get();
+
+        return FestivalSectionResource::collection($sections);
+    }
+
+    public function store(StoreFestivalSectionRequest $request, Event $event): JsonResponse
+    {
+        Gate::authorize('create', [FestivalSection::class, $event]);
+
+        $section = $event->festivalSections()->create($request->validated());
+
+        return $this->created(new FestivalSectionResource($section));
+    }
+
+    public function update(UpdateFestivalSectionRequest $request, Event $event, FestivalSection $section): JsonResponse
+    {
+        Gate::authorize('update', [$section, $event]);
+
+        $section->update($request->validated());
+
+        return $this->success(new FestivalSectionResource($section->fresh()));
+    }
+
+    public function destroy(Event $event, FestivalSection $section): JsonResponse
+    {
+        Gate::authorize('delete', [$section, $event]);
+
+        $section->delete();
+
+        return response()->json(null, 204);
+    }
+
+    public function reorder(ReorderFestivalSectionsRequest $request, Event $event): JsonResponse
+    {
+        Gate::authorize('reorder', [FestivalSection::class, $event]);
+
+        foreach ($request->validated('sections') as $item) {
+            $event->festivalSections()
+                ->where('id', $item['id'])
+                ->update(['sort_order' => $item['sort_order']]);
+        }
+
+        $sections = $event->festivalSections()->ordered()->get();
+
+        return $this->success(FestivalSectionResource::collection($sections));
+    }
+}