EMBERLUXE ADMIN + BUGFIX UPDATE
===============================

Changes made
------------
1. Hardened PaymentController::testConfirm:
   - Public test-payment confirmation is now blocked when APP_ENV=production,
     unless ALLOW_TEST_CONFIRM=1 is explicitly configured.
   - Existing live-payment-key protection is retained.
   - This prevents the public test endpoint from marking an order paid on a
     production site by default.

2. Removed deployment-sensitive files from this distributable:
   - emberluxe-core/.env (contains environment-specific credentials/secrets)
   - diag.php (public diagnostic and upload-test endpoint)
   - error_log (server paths and runtime details)

3. Updated installation notes to stop recommending a public diagnostic URL.

Verification
------------
- The original ZIP archive integrity check passed.
- JavaScript syntax checks passed for the packaged admin scripts.
- PHP syntax checks passed for application PHP files outside vendor/.
- This is a static review; the Laravel app was not booted against a live
  database or payment provider, so full end-to-end checkout/admin tests remain
  necessary.

Deployment notes
----------------
- Keep the original ZIP as a rollback copy.
- Do not overwrite the live database or existing .env blindly.
- Merge the modified PaymentController.php into the current deployment or
  deploy this package to staging first.
- The production .env must be maintained privately on the server.
- Only set ALLOW_TEST_CONFIRM=1 in a controlled staging/demo environment
  after understanding that it permits simulated payment confirmation.
- Rotate any real credentials that were present in the original ZIP, because
  they were included in a shared archive.
