🔧 Fix pre-commit hook to match correct heading level in AGENTS.md

🐛 Add error handling and card existence check in organisations_pay controller

📝 (AGENTS.md): reorganize setup instructions before services table

📝 (AGENTS.md): update seed command to use foreman for proper environment setup

📝 (AGENTS.md): restructure documentation with project title and description
🔧 (git-hooks/pre-commit): fix heading levels to match new documentation structure

🩹 Remove extra empty line from pre-commit hook generated output

📝 (pre-commit): add warning message to inform users that the rest of the file is auto-generated

♻️ Refactor pre-commit hook to dynamically generate AGENTS.md dependencies section

The hook now reads from AGENTS.md and regenerates only the Dependencies section instead of hardcoding all instructions. Also updates documentation with improved setup steps and fixes seeds.rb to conditionally load images only when S3_HOST is set.

📝 (env, pre-commit): add seed account credentials to .env.example
🌱 (pre-commit): document database seeding and login steps in pre-commit hook

🔧 (config): make Google Maps API key optional and fix CI environment setup

Removes conditional geocoding checks that required GOOGLE_MAPS_API_KEY to be present. Adds fallback 'missing_api_key' string in boot.rb for geocoding configuration. Updates CI workflow to explicitly set CI=true environment variable. Updates example env files with generic domain and removes explicit API key references.

🔧 Add .env.example templates for development and testing environments
📝 Add local development setup documentation to pre-commit hook
🧑‍
💻 Update CI workflow to load env vars from .env.test.example instead of hardcoding them

✨ (account.rb): add remove_image to permitted attributes to allow users to delete their profile picture

🐛 Fix incorrect time unit display in ASN stats view

✏️ (asns.erb): use pluralize helper for correct singular/plural form of "day"

🔒️ (security): switch from blacklist to whitelist approach for mass assignment
♻️ (refactor): refactor mass_assigning helper to support permitted_attributes
🐛 (accounts.rb): remove manual password handling to use mass_assigning flow

🔒️ (models/account.rb): expand protected_attributes with additional sensitive fields to prevent mass assignment vulnerabilities

⬆️ (Gemfile.lock): upgrade nokogiri to 1.19.1 and rack to 3.2.5 for bug fixes and improvements

✨ (comments.rb): add force parameter support for comments

Allow privileged users to force-create comments by adding a force parameter that bypasses normal validation when the account has permission to do so

♻️ (photos.rb): replace halt(404) with not_found helper method for consistency

🛂 (photos.rb, access_control.rb): add authorization checks for photo uploads

Add can_add_photo_to? helper to verify user permissions before allowing photo uploads. Validate that photoable_type is in allowed types and that the user has proper access rights for Gathering, Comment, and TicketType objects. This addresses the TODO comment and prevents unauthorized photo uploads.