fix: trust proxies + tailwind v4 + debugbar off

- bootstrap/app.php: trustProxies(at: '*') — nginx/NPM forward HTTPS,
  app must trust X-Forwarded-Proto to generate correct https:// URLs
- package.json: tailwindcss v3 → v4, removed @tailwindcss/forms (v3-only)
- .env: DEBUGBAR_ENABLED=false, VITE_DEV_SERVER_URL corrected

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

bootstrap/app.php

@@ -15,6 +15,8 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
+        $middleware->trustProxies(at: '*');
+
         $middleware->web(append: [
             LocaleFromUser::class,
             SecurityHeaders::class,

package.json

@@ -7,7 +7,6 @@
         "dev": "vite"
     },
     "devDependencies": {
-        "@tailwindcss/forms": "^0.5.2",
         "@tailwindcss/vite": "^4.3.0",
         "alpinejs": "^3.15.12",
         "axios": "^1.11.0",
@@ -17,7 +16,7 @@
         "laravel-vite-plugin": "^2.0.0",
         "pusher-js": "^8.5.0",
         "qrcode-svg": "^1.1.0",
-        "tailwindcss": "^3.1.0",
+        "tailwindcss": "^4",
         "vite": "^7.0.7"
     }
 }