feat: fase 2 backend — crowd types, persons, sections, shifts, invite flow

- Crowd Types + Persons CRUD (73 tests)
- Festival Sections + Time Slots + Shifts CRUD met assign/claim flow (84 tests)
- Invite Flow + Member Management met InvitationService (109 tests)
- Schema v1.6 migraties volledig uitgevoerd
- DevSeeder bijgewerkt met crowd types voor testorganisatie

api/app/Http/Controllers/Api/V1/PersonController.php

@@ -0,0 +1,82 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Api\V1\StorePersonRequest;
+use App\Http\Requests\Api\V1\UpdatePersonRequest;
+use App\Http\Resources\Api\V1\PersonCollection;
+use App\Http\Resources\Api\V1\PersonResource;
+use App\Models\Event;
+use App\Models\Person;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Gate;
+
+final class PersonController extends Controller
+{
+    public function index(Request $request, Event $event): PersonCollection
+    {
+        Gate::authorize('viewAny', [Person::class, $event]);
+
+        $query = $event->persons()->with('crowdType');
+
+        if ($request->filled('crowd_type_id')) {
+            $query->where('crowd_type_id', $request->input('crowd_type_id'));
+        }
+
+        if ($request->filled('status')) {
+            $query->where('status', $request->input('status'));
+        }
+
+        return new PersonCollection($query->get());
+    }
+
+    public function show(Event $event, Person $person): JsonResponse
+    {
+        Gate::authorize('view', [$person, $event]);
+
+        $person->load(['crowdType', 'company']);
+
+        return $this->success(new PersonResource($person));
+    }
+
+    public function store(StorePersonRequest $request, Event $event): JsonResponse
+    {
+        Gate::authorize('create', [Person::class, $event]);
+
+        $person = $event->persons()->create($request->validated());
+
+        return $this->created(new PersonResource($person->fresh()->load('crowdType')));
+    }
+
+    public function update(UpdatePersonRequest $request, Event $event, Person $person): JsonResponse
+    {
+        Gate::authorize('update', [$person, $event]);
+
+        $person->update($request->validated());
+        $person->load(['crowdType', 'company']);
+
+        return $this->success(new PersonResource($person->fresh()->load(['crowdType', 'company'])));
+    }
+
+    public function destroy(Event $event, Person $person): JsonResponse
+    {
+        Gate::authorize('delete', [$person, $event]);
+
+        $person->delete();
+
+        return response()->json(null, 204);
+    }
+
+    public function approve(Event $event, Person $person): JsonResponse
+    {
+        Gate::authorize('approve', [$person, $event]);
+
+        $person->update(['status' => 'approved']);
+
+        return $this->success(new PersonResource($person->fresh()->load('crowdType')));
+    }
+}