[replworks-bot]

Summary

• Fixes the admin panel being available to every user by adding users.is_admin (default false) and checking it in canAccessPanel().
• Non-administrator users can no longer log in to or access the Filament admin panel.
• The local admin seeder grants the flag to cable8mm@gmail.com; the seeded general user stays non-admin.
• Adds php artisan filmo:create-admin {email} to create a new administrator or promote an existing user.
• Supports interactive name/password prompts, optional --name/--password for automation, and validates email and an 8-character minimum password.
• Updates PRODUCT_SPEC.md, ARCHITECTURE.md, and TASKS.md through T-021.

Usage

# Interactive
php artisan filmo:create-admin admin@example.com

# Create a new administrator non-interactively
php artisan filmo:create-admin admin@example.com --name="Admin" --password="secret123"

# Promote an existing user without changing their name or password
php artisan filmo:create-admin existing@example.com

Test plan

• php artisan test --compact (100 passed, 2 skipped live tests)
• XDEBUG_MODE=coverage composer test:coverage (94.22% line coverage)
• vendor/bin/pint --format agent
• npm run build
• Covers admin access, non-admin login/access denial, seeder flags, and command create/promote/validation.