fix(proxy): confiar en X-Forwarded-Proto del proxy inverso (evita http:// tras https)

Sin trustProxies, la app tras un proxy HTTPS (OpenResty/Nginx) genera URLs con
http://, y las cookies "secure" no viajan → 419 en /livewire/update. Añadido
$middleware->trustProxies(at: '*') con los headers X-Forwarded-*.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

bootstrap/app.php

@@ -14,6 +14,17 @@ return Application::configure(basePath: dirname(__DIR__))
     ->withMiddleware(function (Middleware $middleware): void {
         $middleware->appendToGroup('web', \App\Http\Middleware\SetLocale::class);
 
+        // Confiar en el proxy inverso (OpenResty/Nginx) para leer X-Forwarded-Proto:
+        // sin esto, tras HTTPS el proxy Laravel genera URLs con http:// y las cookies
+        // "secure" no viajan → 419 en /livewire/update.
+        $middleware->trustProxies(at: '*', headers:
+            Illuminate\Http\Request::HEADER_X_FORWARDED_FOR  |
+            Illuminate\Http\Request::HEADER_X_FORWARDED_HOST |
+            Illuminate\Http\Request::HEADER_X_FORWARDED_PORT |
+            Illuminate\Http\Request::HEADER_X_FORWARDED_PROTO |
+            Illuminate\Http\Request::HEADER_X_FORWARDED_AWS_ELB,
+        );
+
         // Spatie permission + Sanctum ability middleware aliases
         $middleware->alias([
             'role'               => \Spatie\Permission\Middleware\RoleMiddleware::class,