restore: bring back f8a1310 (security review) state

Restores all files to the f8a1310 security-review snapshot as requested,
plus the 2 boot-critical fixes from a24c8a2 (config/session.php env()
instead of app()->environment(), and removal of the duplicate $activeTab
in ProjectMap.php) so the application actually boots.

Forward commit, no history rewrite. The 7d854ff state remains in history.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

app/Livewire/Reports/ReportsDashboard.php

@@ -7,6 +7,7 @@ use App\Models\Project;
 use App\Models\Phase;
 use App\Models\Inspection;
 use Carbon\Carbon;
+use Illuminate\Support\Facades\Auth;
 
 class ReportsDashboard extends Component
 {
@@ -15,6 +16,7 @@ class ReportsDashboard extends Component
     
     public function mount()
     {
+        if (!Auth::user()->hasRole('Admin')) abort(403);
         $this->loadChartData();
     }