Initial import of fitme3070.pt platform

Plain-PHP fleet platform with id.andmore.pt SSO. Wires shared/platform-tools
as a submodule (platform_update, backups, git/migration tools) like the other
platforms.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.env.example

@@ -0,0 +1,69 @@
+# ─── Environment ────────────────────────────────────────────────────────────
+# 'dev' enables error display. 'prod' is silent.
+APP_ENV=dev
+
+# Public base URL used by base_url() helpers and email links.
+APP_BASE_URL=https://fitme3070.pt/
+
+# ─── Branding ───────────────────────────────────────────────────────────────
+# Selects assets/css/branding-<BRAND>.css for both the backoffice header and
+# the public site head. Files are committed; falls back to `fitme3070`.
+BRAND=fitme3070
+
+# ─── Database (local fitme3070) ─────────────────────────────────────────────
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_NAME=fitme3070
+DB_USER=root
+DB_PASS=
+
+# ─── Notifications (email + SMS) ─────────────────────────────────────────────
+# Delivery is centralized at id.andmore.pt (/notify). This app does not send
+# mail/SMS itself. Auth + endpoint are ANDMORE_ID_URL + NOTIFY_API_KEY below.
+
+# ─── Backup ─────────────────────────────────────────────────────────────────
+BACKUP_TOKEN=replace_me
+BACKUP_KEEP_DAYS=7
+
+# ─── Identity / Andmore ID ─────────────────────────────────────────────────────
+# federated — auth is delegated to id.andmore.pt; the am_sso cookie + central
+# sso_sessions/users tables drive login. This site is part of the ecosystem, so
+# federated is the expected mode (standalone disables all SSO traffic).
+IDENTITY_MODE=federated
+
+# Slug identifying this install on andmore_id.linked_platforms.
+PLATFORM_SLUG=fitme3070
+
+# When true (federated): a register/login fails loudly if the central DB is
+# unreachable, instead of creating an orphan local row. True on prod.
+IDENTITY_REQUIRE_UPSTREAM=false
+
+# Andmore ID central service URL.
+ANDMORE_ID_URL=https://id.andmore.pt/
+
+# Direct DB credentials for the central Andmore ID database (federated mode).
+SSO_DB_HOST=
+SSO_DB_PORT=
+SSO_DB_NAME=andmore_id
+SSO_DB_USER=
+SSO_DB_PASS=
+
+# Parent domain the am_sso cookie is scoped to. Must match id.andmore.pt.
+SSO_COOKIE_DOMAIN=.andmore.pt
+# Override per environment (e.g. am_sso_dev on dev) so prod/dev cookies on the
+# shared parent domain don't clobber each other.
+SSO_COOKIE_NAME=am_sso
+SSO_SESSION_TTL_DAYS=30
+
+# When true (federated): unauthenticated users are sent straight to
+# id.andmore.pt. Leave false during the member migration, flip true after.
+SSO_REQUIRED=false
+
+# ─── Notificações centralizadas (id.andmore.pt /notify) ──────────────────────
+# App key for POST {ANDMORE_ID_URL}notify/send. Minted on id.andmore.pt →
+# Notificações → Chaves de app.
+NOTIFY_API_KEY=
+
+# ─── Git HTTP authentication (views/sysadmin/platform_update.php) ──────────────
+GIT_HTTP_USERNAME=
+GIT_HTTP_TOKEN=