chore: align migrations, docs, and frontends with crewli.app setup

- Replace dated migrations with ordered 2026_04_07_* chain; fold users update into base migration
- Update OrganisationScope, AppServiceProvider, seeders, api routes, and .env.example
- Refresh Cursor rules, CLAUDE.md, Makefile, README, and docs (API, SCHEMA, SETUP)
- Adjust admin/app/portal HTML, packages, api-client, events types, and theme config
- Update docker-compose and VS Code settings; remove stray Office lock files from resources

Made-with: Cursor

.cursor/rules/102_multi_tenancy.mdc

@@ -1,5 +1,5 @@
 ---
-description: Multi-tenancy and portal architecture rules for EventCrew
+description: Multi-tenancy and portal architecture rules for Crewli
 globs: ["api/**/*.php", "apps/portal/**/*.{vue,ts}"]
 alwaysApply: true
 ---
@@ -101,7 +101,7 @@ Route::middleware(['auth:sanctum', 'event.role:event_manager'])->group(...);
 
 ### Token-Based Authentication Flow
 ```
-1. Artist/supplier receives email with link: https://portal.eventcrew.app/advance?token=01HQ3K...
+1. Artist/supplier receives email with link: https://portal.crewli.app/advance?token=01HQ3K...
 2. Portal detects token in URL query parameter
 3. POST /api/v1/portal/token-auth { token: '01HQ3K...' }
 4. Backend validates token against artists.portal_token or production_requests.token
@@ -111,7 +111,7 @@ Route::middleware(['auth:sanctum', 'event.role:event_manager'])->group(...);
 
 ### Login-Based Authentication Flow
 ```
-1. Volunteer navigates to https://portal.eventcrew.app/login
+1. Volunteer navigates to https://portal.crewli.app/login
 2. Enters email + password
 3. POST /api/v1/auth/login (same endpoint as apps/app/)
 4. Returns user + organisations + event roles
@@ -196,6 +196,8 @@ class PortalTokenMiddleware
 'supports_credentials' => true,
 ```
 
+Production example (subdomains on **crewli.app**): `FRONTEND_ADMIN_URL=https://admin.crewli.app`, `FRONTEND_APP_URL=https://app.crewli.app`, `FRONTEND_PORTAL_URL=https://portal.crewli.app`, and `SANCTUM_STATEFUL_DOMAINS=admin.crewli.app,app.crewli.app,portal.crewli.app`.
+
 ## Shift Claiming & Approval Flow
 
 ### Three Assignment Strategies per Shift