feat(v5): authorize creates, deep-link selection, list apps in v4

Restrict V5 application and resource-connection creation to team admins.
Resolve project, environment, and application from query params and keep
session selection in sync. Surface V5 apps on the v4 resource index and
count them for project/environment emptiness. Create the flux data dir
on install and upgrade.

tests/Unit/UpgradePostgresScriptTest.php

@@ -56,6 +56,19 @@ it('generates a dedicated flux laravel api token during install and upgrade', fu
     'nightly upgrade' => 'other/nightly/upgrade.sh',
 ]);
 
+it('creates a writable flux storage directory during install and upgrade', function (string $path) {
+    $script = file_get_contents(getcwd().'/'.$path);
+
+    expect($script)
+        ->toContain('/data/coolify/flux')
+        ->toContain('chown -R 9999:root /data/coolify/flux');
+})->with([
+    'stable install' => 'scripts/install.sh',
+    'nightly install' => 'other/nightly/install.sh',
+    'stable upgrade' => 'scripts/upgrade.sh',
+    'nightly upgrade' => 'other/nightly/upgrade.sh',
+]);
+
 it('uses the selected registry url when extracting upgrade images', function (string $path) {
     $script = file_get_contents(getcwd().'/'.$path);
 

tests/Unit/V5/Policies/V5PolicyTest.php

@@ -230,6 +230,8 @@ it('denies application mutations for a member of the current team as forbidden',
     $member = v5PolicyMemberUser();
     $policy = new ApplicationPolicy;
 
+    expect($policy->create($member, $team)->denied())->toBeTrue();
+
     foreach (['update', 'updateIngress', 'delete'] as $ability) {
         $response = $policy->{$ability}($member, $application, $team);
 
@@ -244,6 +246,8 @@ it('denies resource connection mutations for a member of the current team as for
     $member = v5PolicyMemberUser();
     $policy = new ResourceConnectionPolicy;
 
+    expect($policy->create($member, $team)->denied())->toBeTrue();
+
     foreach (['update', 'delete'] as $ability) {
         $response = $policy->{$ability}($member, $connection, $team);
 
@@ -251,3 +255,11 @@ it('denies resource connection mutations for a member of the current team as for
             ->and($response->status())->toBeNull();
     }
 });
+
+it('allows admins to create applications and resource connections', function () {
+    $team = v5PolicyTeam(10);
+    $admin = v5PolicyUser('admin');
+
+    expect((new ApplicationPolicy)->create($admin, $team)->allowed())->toBeTrue()
+        ->and((new ResourceConnectionPolicy)->create($admin, $team)->allowed())->toBeTrue();
+});

tests/Unit/V5/V4ResourceIndexV5ApplicationTest.php

@@ -0,0 +1,14 @@
+<?php
+
+it('includes v5 applications in the v4 resource index and links them to v5', function () {
+    $component = file_get_contents(app_path('Livewire/Project/Resource/Index.php'));
+    $view = file_get_contents(resource_path('views/livewire/project/resource/index.blade.php'));
+
+    expect($component)
+        ->toContain('V5Application')
+        ->toContain("route('v5.dashboard'")
+        ->toContain("? 'v5' : 'v4'")
+        ->and($view)
+        ->toContain("item.version === 'v5'")
+        ->toContain('V5');
+});