Add account requests, approval, and restricted resources

[gheorghelupu17]

Summary

• Visitors can request an MAI or ONG account. Administrators accept or reject it from a dedicated tab, and acceptance emails a link to set a password.
• Log in and sign up are back in the header. Approved accounts can change their email and password or delete the account.
• Resources can be Public, ONG, MAI, or a combination. Public resources stay visible to everyone; the other levels require the matching approved account.
• Accounts last one year. A daily command emails a renewal link at expiry and deletes accounts that are still expired after one month.
• Administrators can still only create Admin and Editor users.

Closes #48

Test plan

• Submit /ro/register as ONG and confirm the request appears in admin under Cereri de cont.
• Accept it, set a password from the email link, and sign in.
• Mark a resource as ONG and confirm it is hidden until an ONG account is signed in.
• php artisan test --compact tests/Feature/AccountAccessTest.php tests/Feature/AuthTest.php

Made with Cursor