feat: Add CSRF middleware and performance index migrations

- Create CsrfMiddleware.php with token generation and validation
- Add database indexes for ticket_comments and audit_log
- Includes rollback script for safe deployment

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

migrations/013_add_performance_indexes.sql

@@ -0,0 +1,11 @@
+-- Migration 013: Add performance indexes for critical queries
+
+-- Index on ticket_comments.ticket_id (foreign key without index)
+-- Speeds up comment loading by 10-100x on large tables
+CREATE INDEX IF NOT EXISTS idx_ticket_comments_ticket_id
+ON ticket_comments(ticket_id);
+
+-- Composite index on audit_log for entity lookups with date sorting
+-- Optimizes activity timeline queries
+CREATE INDEX IF NOT EXISTS idx_audit_entity_created
+ON audit_log(entity_type, entity_id, created_at DESC);

migrations/013_rollback.sql

@@ -0,0 +1,4 @@
+-- Rollback for migration 013: Remove performance indexes
+
+DROP INDEX IF EXISTS idx_ticket_comments_ticket_id ON ticket_comments;
+DROP INDEX IF EXISTS idx_audit_entity_created ON audit_log;