feat: source tokens and client events API

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BCrwHHnGCB5XH968Nxokqw

core/app/Http/Middleware/AuthenticateSource.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Models\Source;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class AuthenticateSource
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        $token = $request->bearerToken();
+        if ($token === null || $token === '') {
+            return response()->json(['message' => 'Нужен Bearer-токен источника'], 401);
+        }
+
+        $source = Source::where('token_hash', hash('sha256', $token))->first();
+        if ($source === null) {
+            return response()->json(['message' => 'Неизвестный токен источника'], 401);
+        }
+
+        $request->attributes->set('source', $source);
+
+        return $next($request);
+    }
+}