fix(security): enforce team access on mutable actions

Authorize cloud provider token access, audit sensitive operations, and
standardize public IDs across deployment and resource flows.

app/Livewire/Storage/Resources.php

@@ -4,16 +4,21 @@ namespace App\Livewire\Storage;
 
 use App\Models\S3Storage;
 use App\Models\ScheduledDatabaseBackup;
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
 use Livewire\Component;
 
 class Resources extends Component
 {
+    use AuthorizesRequests;
+
     public S3Storage $storage;
 
     public array $selectedStorages = [];
 
     public function mount(): void
     {
+        $this->authorize('view', $this->storage);
+
         $backups = ScheduledDatabaseBackup::where('s3_storage_id', $this->storage->id)
             ->where('save_s3', true)
             ->get();
@@ -25,6 +30,8 @@ class Resources extends Component
 
     public function disableS3(int $backupId): void
     {
+        $this->authorize('update', $this->storage);
+
         $backup = ScheduledDatabaseBackup::where('id', $backupId)
             ->where('s3_storage_id', $this->storage->id)
             ->firstOrFail();
@@ -41,6 +48,8 @@ class Resources extends Component
 
     public function moveBackup(int $backupId): void
     {
+        $this->authorize('update', $this->storage);
+
         $backup = ScheduledDatabaseBackup::where('id', $backupId)
             ->where('s3_storage_id', $this->storage->id)
             ->firstOrFail();
@@ -62,6 +71,8 @@ class Resources extends Component
             return;
         }
 
+        $this->authorize('update', $newStorage);
+
         $backup->update(['s3_storage_id' => $newStorage->id]);
 
         unset($this->selectedStorages[$backupId]);