Kazem Alghasi a5fd01dde1 chore(api): implement rate limiting for sensitive endpoints ... Introduce granular rate limiting across various API categories to improve security and prevent abuse. This includes protection against brute-force attacks on authentication and SMS endpoints, as well as resource management for public, customer, wallet, and staff APIs. - Add `auth` rate limiter (5 requests/min per IP) - Add `sms` rate limiter (1 request/min per phone/IP) - Add `public` rate limiter (30 requests/min per IP) - Add `customer` rate limiter (60 requests/min per user) - Add `wallet` rate limiter (30 requests/min per user) - Add `staff` rate limiter (60 requests/min per user) - Apply middleware to corresponding routes in `api.php` - Remove obsolete `test_pdf_generation.php` script		2026-10-04 01:35:22 +03:30
..
one-off	docs(architecture): document shipment review workflow and ADRs	2026-10-03 06:20:32 +03:30