Complete Payment module: initiate/webhook/confirm/refund actions, Filament resources (T5.8-T5.13)

- InitiatePaymentAction + POST /api/v1/payments/{booking}/initiate
- Generic KBZ webhook (POST /api/v1/webhooks/{method}/{encryptBookingId?}),
  signature verification per KBZ's real callback spec, PaymentGatewayInterface::handleWebhook()
- ConfirmPaymentAction: idempotent confirmation, PaymentCompleted/PaymentFailed events,
  MarkBookingPaid listener
- RefundBookingAction + POST /api/v1/bookings/{booking}/refund: partial refunds validated
  against remaining balance, RefundProcessed event, MarkBookingRefunded listener
- CancelBookingAction now refunds confirmed bookings instead of rejecting; BookingPolicy::cancel
  requires process_refunds for confirmed bookings
- PaymentPlugin + PaymentResource/RefundResource Filament admin UI (read-only payments,
  refund list + Process action)
- Booking detail page now shows related payments
- Fix CACHE_STORE mismatch (database -> redis) so tagged route caching works
- CLAUDE.md: never run migrate:fresh/migrate:refresh/db:wipe on dev without being asked

app-modules/booking/src/Exceptions/BookingCannotBeCancelledException.php

@@ -4,19 +4,20 @@ namespace Modules\Booking\Exceptions;
 
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
-use Modules\Booking\Enums\BookingStatus;
 use Modules\Booking\Models\Booking;
 use RuntimeException;
 
 class BookingCannotBeCancelledException extends RuntimeException
 {
+    /**
+     * Confirmed bookings no longer reach this — CancelBookingAction (T5.12)
+     * refunds them instead. This is only for statuses that can't be
+     * cancelled at all (already cancelled/expired).
+     */
     public static function notPendingPayment(Booking $booking): self
     {
         return new self(
-            "Booking [{$booking->booking_ref}] cannot be cancelled directly because its status is [{$booking->status->value}]."
-            .($booking->status === BookingStatus::Confirmed
-                ? ' A confirmed (paid) booking must go through a refund first.'
-                : '')
+            "Booking [{$booking->booking_ref}] cannot be cancelled because its status is [{$booking->status->value}]."
         );
     }