feat: JWT secret in .env, conflict detection, docs, deploy script

- Move JWT_SECRET from hardcode to .env (security)
- Add hasInstructorConflict() to Appointment model
- Add conflict check in store() and update() — returns 409
- Add .env.example with placeholder
- Add API documentation (README.md)
- Add deploy_api.sh script

scripts/deploy_api.sh

@@ -0,0 +1,50 @@
+#!/bin/bash
+set -e
+
+# DriveTime API Deployment Script
+# Usage: ./scripts/deploy_api.sh
+
+API_LOCAL="/home/admin-drive-time-planer/drivetimeplaner/api"
+API_REMOTE="/srv/web/fahrschuldesk/domains/api.fahrschultermin.de"
+SSH_OPTS="-p 2225"
+
+echo "=== Deploying DriveTime Slim API ==="
+
+# 1. Rsync source files (exclude vendor, .env, storage)
+echo "[1/4] Syncing files..."
+rsync -avz --delete \
+  --exclude='vendor/' \
+  --exclude='.env' \
+  --exclude='storage/' \
+  -e "ssh $SSH_OPTS" \
+  "$API_LOCAL/" \
+  "fahrschuldesk@fahrschultermin.de:$API_REMOTE/"
+
+# 2. Composer install on server
+echo "[2/4] Running composer install..."
+ssh $SSH_OPTS "fahrschuldesk@fahrschultermin.de" \
+  "cd $API_REMOTE && composer install --no-dev --optimize-autoloader 2>&1"
+
+# 3. Clear OPcache if needed
+echo "[3/4] Checking PHP OPcache..."
+ssh $SSH_OPTS "fahrschuldesk@fahrschultermin.de" \
+  "php -r 'if(function_exists(\"opcache_get_status\")) { opcache_get_status(); }' 2>/dev/null && echo 'OPcache active' || echo 'No OPcache'"
+
+# 4. Test login endpoint
+echo "[4/4] Testing API..."
+TOKEN=$(curl -sf -X POST "https://api.fahrschultermin.de/api/v1/auth/login" \
+  -H "Content-Type: application/json" \
+  -d '{"email":"admin@nordring.test","password":"Tanja82"}' | jq -r '.token')
+
+if [ -n "$TOKEN" ] && [ "$TOKEN" != "null" ]; then
+  echo "✓ Login successful"
+  curl -sf "https://api.fahrschultermin.de/api/v1/bootstrap" \
+    -H "Authorization: Bearer $TOKEN" | jq -e '.tenant.name' > /dev/null 2>&1
+  echo "✓ Bootstrap endpoint working"
+else
+  echo "✗ Login failed - check JWT_SECRET on server"
+  exit 1
+fi
+
+echo ""
+echo "=== Deployment complete ==="