Cut over-engineering found by a repo-wide audit

- Config: auth, services, logging, queue and database only repeated the
  framework's own files and are gone; the others keep only the keys that
  differ (app version, cache serializable_classes, session cookie name,
  Markdown mail theme, the shares disk, three Octane values, Livewire's
  pagination theme and payload guards).
- Email verification is removed: User never implemented MustVerifyEmail,
  so it was never enforced, and SealShare has a single admin and no
  registration. CreateNewUser goes with it.
- FileEncryptionService::encryptFile() and generateSalt() were only used
  by tests; tests build files with encryptTestFile() in tests/Pest.php.
- The expiration options are defined once, as Share::EXPIRATIONS. "30 Days"
  now lasts 30 days instead of a calendar month, and Admin settings only
  save a default expiration that is one of the options.
- One-caller helpers are inlined, the uploader reads chunk responses with
  XHR's responseType, and starter-kit leftovers are removed.
- Docker: PHP reads the PHP_* limits from the environment itself
  (${VAR:-default} in uploads.ini); both entrypoints stop writing the ini.
  docker-compose.yml shares the app and scheduler variables through one
  anchor. The dev image installs gd for the screenshot publisher and fake
  test images.
- Development runs in Docker only: the composer dev script, concurrently,
  laravel/pail, laravel/sail, autoprefixer and the shell-quote override
  are gone.
- phpunit.xml forces the test environment with <server> entries, so tests
  run in the dev container no longer use its real database.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

docker/dev-entrypoint.sh

@@ -3,16 +3,6 @@ set -e
 
 cd /app
 
-# Generate PHP ini from environment variables (with defaults)
-echo "[dev] Configuring PHP settings..."
-cat > /usr/local/etc/php/conf.d/99-uploads.ini <<EOF
-upload_max_filesize = ${PHP_UPLOAD_MAX_FILESIZE:-64M}
-post_max_size = ${PHP_POST_MAX_SIZE:-64M}
-max_execution_time = ${PHP_MAX_EXECUTION_TIME:-300}
-max_input_time = ${PHP_MAX_INPUT_TIME:-300}
-memory_limit = ${PHP_MEMORY_LIMIT:-512M}
-EOF
-
 # Every start, so a pull with new packages needs no extra step; with nothing new it takes a second
 echo "[dev] Installing PHP dependencies..."
 composer install --no-interaction 2>&1

docker/entrypoint.sh

@@ -12,16 +12,6 @@ if [ -z "$APP_KEY" ]; then
     echo "[entrypoint] WARNING: Set this APP_KEY in your docker-compose.yml to persist across restarts!"
 fi
 
-# Generate PHP ini from environment variables (with defaults)
-echo "[entrypoint] Configuring PHP settings..."
-cat > /usr/local/etc/php/conf.d/99-uploads.ini <<EOF
-upload_max_filesize = ${PHP_UPLOAD_MAX_FILESIZE:-64M}
-post_max_size = ${PHP_POST_MAX_SIZE:-64M}
-max_execution_time = ${PHP_MAX_EXECUTION_TIME:-300}
-max_input_time = ${PHP_MAX_INPUT_TIME:-300}
-memory_limit = ${PHP_MEMORY_LIMIT:-512M}
-EOF
-
 # A docker-compose.yml from before 2.1.1 mounts the SQLite volume over all of /app/database, so the
 # migrations folder is the one the volume was created with: add this image's newer migrations to it.
 for migration in docker/migrations/*.php; do

docker/php/uploads.ini

@@ -1,9 +1,8 @@
-; PHP settings for file uploads.
-; These are default values — overridden at runtime by the entrypoint
-; when PHP_UPLOAD_MAX_FILESIZE / PHP_POST_MAX_SIZE / etc. env vars are set.
+; PHP limits for the admin's logo upload and long requests. PHP reads each value from its
+; environment variable when set (docker-compose.yml passes them), otherwise the default after ":-".
 
-upload_max_filesize = 64M
-post_max_size = 64M
-max_execution_time = 300
-max_input_time = 300
-memory_limit = 512M
+upload_max_filesize = ${PHP_UPLOAD_MAX_FILESIZE:-64M}
+post_max_size = ${PHP_POST_MAX_SIZE:-64M}
+max_execution_time = ${PHP_MAX_EXECUTION_TIME:-300}
+max_input_time = ${PHP_MAX_INPUT_TIME:-300}
+memory_limit = ${PHP_MEMORY_LIMIT:-512M}