feat:實作評價系統 — 匿名評價、有幫助投票、手動完成預約

後端：
- 新增 reviews / review_edits / review_votes migration（含索引）
- Review / ReviewEdit / ReviewVote Model
- ReviewController：評價 CRUD、資格驗證（completed booking）、rating 即時重算
- toggleHelpful：Member 限定、GREATEST 原子防負、DB transaction 同步
- AdminReviewController：全量列表、刪除（含重算）
- AdminBookingController：全量列表、手動標記 completed
- ProviderBookingController 新增 complete 方法（教練手動完成預約）
- DevelopmentSeeder：快速重建測試資料（admin/coach/member + offers + bookings）
- EnsureAdmin middleware 正式納入 bootstrap/app.php
- Nginx server_name 加入 cfdive.local

前端：
- 課程詳情頁加入評價區塊（星等分布、排序切換、撰寫/修改/刪除、有幫助 Toggle）
- Coach Portal 新增「課程評價」頁（只讀，依課程分組）
- Coach 預約管理加入「完成」按鈕
- Admin 新增「預約管理」頁（標記完成）、「評價管理」頁（刪除）
- Admin / Coach Navbar 新增對應連結

OpenSpec：
- review-system change 歸檔至 archive/2026-05-12-review-system
- 新增 specs/review-lifecycle 與 specs/review-voting 主規格
- review-voting spec 補充 Member 限定與 GREATEST 原子更新說明

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

routes/api.php

@@ -7,6 +7,9 @@ use App\Http\Controllers\API\ProviderOfferController;
 use App\Http\Controllers\API\ScheduleController;
 use App\Http\Controllers\API\ProviderBookingController;
 use App\Http\Controllers\API\MemberBookingController;
+use App\Http\Controllers\API\ReviewController;
+use App\Http\Controllers\API\AdminReviewController;
+use App\Http\Controllers\API\AdminBookingController;
 use App\Http\Controllers\API\AdminStatsController;
 use App\Http\Controllers\API\AdminUserController;
 use App\Http\Controllers\API\AdminOfferController;
@@ -20,6 +23,7 @@ Route::get('/ping', function () {
 Route::get('/diving-offers', [DivingOfferController::class, 'index']);
 Route::get('/diving-offers/{id}', [DivingOfferController::class, 'show']);
 Route::get('/diving-offers/{id}/schedules', [ScheduleController::class, 'publicList']);
+Route::get('/diving-offers/{id}/reviews',  [ReviewController::class, 'publicList']);
 
 // 你可以在這裡繼續新增 API 路由
 Route::post('/testpost', function () {
@@ -52,8 +56,15 @@ Route::middleware(['auth:sanctum'])->prefix('member')->group(function () {
     Route::post('/bookings',         [MemberBookingController::class, 'store']);
     Route::get('/bookings/{id}',     [MemberBookingController::class, 'show']);
     Route::delete('/bookings/{id}',  [MemberBookingController::class, 'destroy']);
+    // 評價
+    Route::post('/reviews',       [ReviewController::class, 'store']);
+    Route::put('/reviews/{id}',   [ReviewController::class, 'update']);
+    Route::delete('/reviews/{id}',[ReviewController::class, 'destroy']);
 });
 
+// 有幫助投票（需登入，但不限 member prefix）
+Route::middleware('auth:sanctum')->post('/reviews/{id}/helpful', [ReviewController::class, 'toggleHelpful']);
+
 // 服務提供者註冊／登入
 Route::post('/provider/register', [AuthController::class, 'registerProvider']);
 Route::post('/provider/login', [AuthController::class, 'loginProvider']);
@@ -84,6 +95,7 @@ Route::middleware(['auth:sanctum'])->prefix('provider')->group(function () {
     Route::put('/bookings/{id}/confirm',         [ProviderBookingController::class, 'confirm']);
     Route::put('/bookings/{id}/reject',          [ProviderBookingController::class, 'reject']);
     Route::put('/bookings/{id}/cancel',          [ProviderBookingController::class, 'cancel']);
+    Route::put('/bookings/{id}/complete',        [ProviderBookingController::class, 'complete']);
 });
 
 // 管理員註冊／登入
@@ -91,7 +103,7 @@ Route::post('/admin/register', [AuthController::class, 'registerAdmin']);
 Route::post('/admin/login', [AuthController::class, 'loginAdmin']);
 
 // 管理員專屬 API（需登入）
-Route::middleware(['auth:sanctum'])->prefix('admin')->group(function () {
+Route::middleware(['auth:sanctum', 'admin'])->prefix('admin')->group(function () {
     // 管理員登出
     Route::post('/logout', [AuthController::class, 'logoutAdmin']);
     // 取得管理員個人資料
@@ -117,6 +129,12 @@ Route::middleware(['auth:sanctum'])->prefix('admin')->group(function () {
     // 課程管理
     Route::get('/offers',           [AdminOfferController::class, 'index']);
     Route::delete('/offers/{id}',   [AdminOfferController::class, 'destroy']);
+    // 預約管理
+    Route::get('/bookings',                   [AdminBookingController::class, 'index']);
+    Route::put('/bookings/{id}/complete',     [AdminBookingController::class, 'complete']);
+    // 評價管理
+    Route::get('/reviews',          [AdminReviewController::class, 'index']);
+    Route::delete('/reviews/{id}',  [AdminReviewController::class, 'destroy']);
 });
 
 // 需要認證的通用路由