feat: contactos editáveis, equipa com título/aptidões, mensalidades e reviews Google

- Contactos: nova página no backoffice (fitme3070_info) e 964 201 137 como
  telefone principal; o telefone secundário só aparece quando existe.
- Equipa: título, aptidões/funções e formações; o cartão mostra foto, nome e
  título e abre um cartão horizontal de detalhe (hover no desktop, toque no
  telemóvel) sem mexer na grelha.
- Mensalidades: cartões editáveis com um destaque, modal de inscrição que
  guarda o pedido (RGPD + estado + campos reservados para o CRM) e avisa o
  ginásio por e-mail; lista de pedidos com estados, notas e CSV.
- Reviews Google via Places API (New), filtradas por classificação mínima e
  em cache configurável; página de configuração com pesquisa do Place ID.
- Assets com ?v=<mtime>: site/assets é servido com cache imutável de 1 ano.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

views/admin/memberships/_form.php

@@ -0,0 +1,63 @@
+<?php
+// Shared membership form fields, rendered inside the <form> of create.php and
+// edit.php. Expects $data (see memberships_defaults()).
+$price_val = ($data['price'] ?? '') === null ? '' : (string) ($data['price'] ?? '');
+if ($price_val !== '' && is_numeric($price_val)) {
+    $p = (float) $price_val;
+    $price_val = number_format($p, floor($p) == $p ? 0 : 2, ',', '');
+}
+?>
+<div class="row g-3">
+    <div class="col-md-8">
+        <label class="form-label">Nome <span class="text-danger">*</span></label>
+        <input class="form-control" name="name" required maxlength="100" placeholder="ex.: Off-hours" value="<?= htmlspecialchars($data['name'] ?? '') ?>">
+    </div>
+    <div class="col-md-4">
+        <label class="form-label">Ordem</label>
+        <input type="number" class="form-control" name="item_order" value="<?= (int) ($data['item_order'] ?? 0) ?>">
+        <div class="form-text">Menor aparece primeiro.</div>
+    </div>
+    <div class="col-12">
+        <label class="form-label">Descrição curta</label>
+        <input class="form-control" name="subtitle" maxlength="255" placeholder="ex.: Mensalidade para as horas baixas do ginásio." value="<?= htmlspecialchars($data['subtitle'] ?? '') ?>">
+    </div>
+    <div class="col-md-4">
+        <label class="form-label">Preço (€)</label>
+        <input class="form-control" name="price" inputmode="decimal" placeholder="ex.: 34,90" value="<?= htmlspecialchars($price_val) ?>">
+        <div class="form-text">Vazio = «Sob consulta».</div>
+    </div>
+    <div class="col-md-5">
+        <label class="form-label">Texto do preço</label>
+        <input class="form-control" name="price_suffix" maxlength="60" placeholder="/mês" value="<?= htmlspecialchars($data['price_suffix'] ?? '') ?>">
+        <div class="form-text">ex.: «/mês» ou «acresce à mensalidade».</div>
+    </div>
+    <div class="col-md-3 d-flex align-items-center">
+        <div class="form-check mt-3">
+            <input class="form-check-input" type="checkbox" name="is_addon" id="is_addon" value="1" <?= !empty($data['is_addon']) ? 'checked' : '' ?>>
+            <label class="form-check-label" for="is_addon">Acresce à mensalidade <span class="text-muted small">(mostra «+»)</span></label>
+        </div>
+    </div>
+    <div class="col-12">
+        <label class="form-label">Incluído</label>
+        <textarea class="form-control" name="features" rows="5" placeholder="Um ponto por linha"><?= htmlspecialchars($data['features'] ?? '') ?></textarea>
+    </div>
+    <div class="col-md-4">
+        <label class="form-label">Texto do botão</label>
+        <input class="form-control" name="cta_label" maxlength="40" value="<?= htmlspecialchars($data['cta_label'] ?? 'Inscrever') ?>">
+    </div>
+    <div class="col-md-4">
+        <label class="form-label">Selo do destaque</label>
+        <input class="form-control" name="featured_label" maxlength="40" value="<?= htmlspecialchars($data['featured_label'] ?? 'Mais popular') ?>">
+    </div>
+    <div class="col-md-4 d-flex flex-column justify-content-end gap-1">
+        <div class="form-check">
+            <input class="form-check-input" type="checkbox" name="is_featured" id="is_featured" value="1" <?= !empty($data['is_featured']) ? 'checked' : '' ?>>
+            <label class="form-check-label" for="is_featured">Em destaque</label>
+        </div>
+        <div class="form-check">
+            <input class="form-check-input" type="checkbox" name="is_active" id="is_active" value="1" <?= !empty($data['is_active']) ? 'checked' : '' ?>>
+            <label class="form-check-label" for="is_active">Visível no site</label>
+        </div>
+    </div>
+    <div class="col-12"><div class="form-text mt-0">Só um cartão pode estar em destaque — ao marcar este, o anterior deixa de estar.</div></div>
+</div>

views/admin/memberships/create.php

@@ -0,0 +1,38 @@
+<?php
+require __DIR__ . '/../../../config/db.php';
+require __DIR__ . '/../../../config/functions.php';
+$user = require_admin();
+
+$errors = [];
+$data   = memberships_defaults();
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    csrf_check();
+    $data = memberships_from_post($_POST, $errors);
+    if (!$errors) {
+        db_memberships_create($pdo, $data);
+        session()->setFlashdata('success', 'Mensalidade criada.');
+        header('Location: ' . base_url('views/admin/memberships/index.php'));
+        exit;
+    }
+}
+
+$page_title = 'Nova Mensalidade';
+include __DIR__ . '/../../../includes/header.php';
+?>
+<div class="container" style="max-width:800px;">
+    <div class="d-flex justify-content-between align-items-center mb-4">
+        <h1 class="h3 mb-0">Nova Mensalidade</h1>
+        <a class="btn btn-outline-secondary btn-sm" href="index.php"><i class="bi bi-arrow-left me-1"></i>Voltar</a>
+    </div>
+    <?php foreach ($errors as $e): ?><div class="alert alert-danger"><?= htmlspecialchars($e) ?></div><?php endforeach; ?>
+    <form method="POST" class="card shadow-sm"><div class="card-body">
+        <?= csrf_field() ?>
+        <?php include __DIR__ . '/_form.php'; ?>
+        <div class="mt-4 d-flex gap-2">
+            <button type="submit" class="btn btn-primary">Criar</button>
+            <a class="btn btn-outline-secondary" href="index.php">Cancelar</a>
+        </div>
+    </div></form>
+</div>
+<?php include __DIR__ . '/../../../includes/footer.php'; ?>

views/admin/memberships/edit.php

@@ -0,0 +1,42 @@
+<?php
+require __DIR__ . '/../../../config/db.php';
+require __DIR__ . '/../../../config/functions.php';
+$user = require_admin();
+
+$id   = (int) ($_GET['id'] ?? 0);
+$item = $id ? db_memberships_get($pdo, $id) : null;
+if (!$item) { header('Location: index.php'); exit; }
+
+$errors = [];
+$data   = $item;
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    csrf_check();
+    $data = memberships_from_post($_POST, $errors);
+    if (!$errors) {
+        $changed = db_memberships_update($pdo, $id, $data);
+        session()->setFlashdata($changed ? 'success' : 'warning', $changed ? 'Mensalidade atualizada.' : 'Nenhuma alteração.');
+        header('Location: ' . base_url('views/admin/memberships/edit.php?id=' . $id));
+        exit;
+    }
+}
+
+$page_title = 'Editar Mensalidade';
+include __DIR__ . '/../../../includes/header.php';
+?>
+<div class="container" style="max-width:800px;">
+    <div class="d-flex justify-content-between align-items-center mb-4">
+        <h1 class="h3 mb-0">Editar Mensalidade</h1>
+        <a class="btn btn-outline-secondary btn-sm" href="index.php"><i class="bi bi-arrow-left me-1"></i>Voltar</a>
+    </div>
+    <?php foreach ($errors as $e): ?><div class="alert alert-danger"><?= htmlspecialchars($e) ?></div><?php endforeach; ?>
+    <form method="POST" class="card shadow-sm"><div class="card-body">
+        <?= csrf_field() ?>
+        <?php include __DIR__ . '/_form.php'; ?>
+        <div class="mt-4 d-flex gap-2">
+            <button type="submit" class="btn btn-primary">Atualizar</button>
+            <a class="btn btn-outline-secondary" href="index.php">Cancelar</a>
+        </div>
+    </div></form>
+</div>
+<?php include __DIR__ . '/../../../includes/footer.php'; ?>

views/admin/memberships/index.php

@@ -0,0 +1,70 @@
+<?php
+require __DIR__ . '/../../../config/db.php';
+require __DIR__ . '/../../../config/functions.php';
+$user = require_admin();
+
+// Delete / restore are POST + CSRF (csrf_check() only guards POST).
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    csrf_check();
+    if (isset($_POST['delete'])) {
+        db_memberships_delete($pdo, (int) $_POST['delete']);
+        session()->setFlashdata('success', 'Mensalidade apagada.');
+    } elseif (isset($_POST['restore'])) {
+        db_memberships_restore($pdo, (int) $_POST['restore']);
+        session()->setFlashdata('success', 'Mensalidade restaurada.');
+    }
+    header('Location: ' . base_url('views/admin/memberships/index.php'));
+    exit;
+}
+
+$items     = db_memberships_list($pdo, true);
+$new_leads = db_membership_leads_count_new($pdo);
+$page_title = 'Mensalidades';
+include __DIR__ . '/../../../includes/header.php';
+?>
+<div class="container">
+    <div class="d-flex justify-content-between align-items-center flex-wrap gap-2 mb-4">
+        <h1 class="h3 mb-0">Mensalidades</h1>
+        <div class="d-flex gap-2">
+            <a class="btn btn-outline-primary" href="<?= base_url('views/admin/memberships/leads.php') ?>">
+                <i class="bi bi-inbox me-1"></i>Pedidos de inscrição<?php if ($new_leads): ?> <span class="badge bg-danger"><?= $new_leads ?></span><?php endif; ?>
+            </a>
+            <a class="btn btn-primary" href="<?= base_url('views/admin/memberships/create.php') ?>"><i class="bi bi-plus-lg me-1"></i>Adicionar</a>
+        </div>
+    </div>
+
+    <div class="card shadow-sm"><div class="card-body p-0">
+        <form method="POST" class="mb-0"><?= csrf_field() ?>
+        <table class="table table-hover align-middle mb-0">
+            <thead class="table-light"><tr>
+                <th>Nome</th><th>Preço</th><th>Estado</th><th>Ordem</th><th style="width:120px">Ações</th>
+            </tr></thead>
+            <tbody>
+            <?php if (!$items): ?>
+                <tr><td colspan="5" class="text-center text-muted py-4">Nenhuma mensalidade.</td></tr>
+            <?php else: foreach ($items as $m): $deleted = $m['deleted_at'] !== null; ?>
+                <tr class="<?= $deleted ? 'text-muted' : '' ?>">
+                    <td><strong><?= htmlspecialchars($m['name']) ?></strong>
+                        <?php if ($m['is_featured']): ?><span class="badge bg-warning text-dark ms-1"><i class="bi bi-star-fill"></i> Destaque</span><?php endif; ?>
+                        <?php if ($m['subtitle'] !== ''): ?><div class="small text-muted"><?= htmlspecialchars($m['subtitle']) ?></div><?php endif; ?></td>
+                    <td class="text-nowrap"><?= htmlspecialchars(membership_price_label($m)) ?> <span class="small text-muted"><?= htmlspecialchars($m['price_suffix']) ?></span></td>
+                    <td><?php if ($deleted): ?><span class="badge bg-secondary">Apagada</span>
+                        <?php elseif ($m['is_active']): ?><span class="badge bg-success">Visível</span>
+                        <?php else: ?><span class="badge bg-light text-dark border">Oculta</span><?php endif; ?></td>
+                    <td><?= (int) $m['item_order'] ?></td>
+                    <td class="text-nowrap">
+                        <?php if ($deleted): ?>
+                            <button class="btn btn-sm btn-outline-info" name="restore" value="<?= (int) $m['id'] ?>">Restaurar</button>
+                        <?php else: ?>
+                            <a class="btn btn-sm btn-outline-primary" href="edit.php?id=<?= (int) $m['id'] ?>"><i class="bi bi-pencil"></i></a>
+                            <button class="btn btn-sm btn-outline-danger" name="delete" value="<?= (int) $m['id'] ?>" onclick="return confirm('Apagar esta mensalidade?')"><i class="bi bi-trash"></i></button>
+                        <?php endif; ?>
+                    </td>
+                </tr>
+            <?php endforeach; endif; ?>
+            </tbody>
+        </table>
+        </form>
+    </div></div>
+</div>
+<?php include __DIR__ . '/../../../includes/footer.php';

views/admin/memberships/leads.php

@@ -0,0 +1,105 @@
+<?php
+require __DIR__ . '/../../../config/db.php';
+require __DIR__ . '/../../../config/functions.php';
+$user = require_admin();
+
+$statuses = membership_lead_statuses();
+$filter   = (string) ($_GET['status'] ?? '');
+if (!isset($statuses[$filter])) $filter = '';
+$self = base_url('views/admin/memberships/leads.php' . ($filter !== '' ? '?status=' . $filter : ''));
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    csrf_check();
+    if (isset($_POST['delete'])) {
+        db_membership_lead_delete($pdo, (int) $_POST['delete']);
+        session()->setFlashdata('success', 'Pedido apagado.');
+    } elseif (isset($_POST['save'])) {
+        $id = (int) $_POST['save'];
+        db_membership_lead_update($pdo, $id, (string) ($_POST['status'][$id] ?? ''), trim((string) ($_POST['notes'][$id] ?? '')));
+        session()->setFlashdata('success', 'Pedido atualizado.');
+    }
+    header('Location: ' . $self);
+    exit;
+}
+
+$leads = db_membership_leads_list($pdo, $filter);
+
+// CSV export of the current filter (Excel-friendly: UTF-8 BOM + ';').
+if (isset($_GET['csv'])) {
+    header('Content-Type: text/csv; charset=utf-8');
+    header('Content-Disposition: attachment; filename="pedidos-inscricao-' . date('Y-m-d') . '.csv"');
+    $out = fopen('php://output', 'w');
+    fwrite($out, "\xEF\xBB\xBF");
+    fputcsv($out, ['Data', 'Mensalidade', 'Nome', 'Telemóvel', 'E-mail', 'Mensagem', 'Estado', 'Notas', 'Consentimento'], ';', '"', '');
+    foreach ($leads as $l) {
+        fputcsv($out, [$l['created_at'], $l['membership_name'], $l['name'], $l['phone'], $l['email'], $l['message'],
+                       $statuses[$l['status']] ?? $l['status'], (string) $l['admin_notes'], $l['consent'] ? 'sim' : 'não'], ';', '"', '');
+    }
+    exit;
+}
+
+$badge = ['novo' => 'bg-danger', 'contactado' => 'bg-info text-dark', 'inscrito' => 'bg-success', 'descartado' => 'bg-secondary'];
+$page_title = 'Pedidos de inscrição';
+include __DIR__ . '/../../../includes/header.php';
+?>
+<div class="container">
+    <div class="d-flex justify-content-between align-items-center flex-wrap gap-2 mb-3">
+        <h1 class="h3 mb-0">Pedidos de inscrição</h1>
+        <div class="d-flex gap-2">
+            <a class="btn btn-outline-secondary" href="<?= $self . ($filter !== '' ? '&' : '?') ?>csv=1"><i class="bi bi-filetype-csv me-1"></i>Exportar CSV</a>
+            <a class="btn btn-outline-secondary" href="<?= base_url('views/admin/memberships/index.php') ?>"><i class="bi bi-arrow-left me-1"></i>Mensalidades</a>
+        </div>
+    </div>
+    <p class="text-muted small">Pedidos enviados pelo botão de inscrição dos cartões de mensalidade. Cada pedido também é enviado por e-mail para o endereço dos Contactos.</p>
+
+    <ul class="nav nav-pills mb-3">
+        <li class="nav-item"><a class="nav-link<?= $filter === '' ? ' active' : '' ?>" href="?">Todos</a></li>
+        <?php foreach ($statuses as $k => $label): ?>
+        <li class="nav-item"><a class="nav-link<?= $filter === $k ? ' active' : '' ?>" href="?status=<?= $k ?>"><?= $label ?></a></li>
+        <?php endforeach; ?>
+    </ul>
+
+    <form method="POST" class="card shadow-sm"><div class="card-body p-0">
+        <?= csrf_field() ?>
+        <div class="table-responsive">
+        <table class="table align-middle mb-0">
+            <thead class="table-light"><tr>
+                <th>Data</th><th>Mensalidade</th><th>Contacto</th><th>Mensagem</th><th style="min-width:220px">Estado / notas</th><th></th>
+            </tr></thead>
+            <tbody>
+            <?php if (!$leads): ?>
+                <tr><td colspan="6" class="text-center text-muted py-4">Sem pedidos.</td></tr>
+            <?php else: foreach ($leads as $l): $id = (int) $l['id']; ?>
+                <tr>
+                    <td class="small text-nowrap"><?= htmlspecialchars(date('d/m/Y H:i', strtotime($l['created_at']))) ?></td>
+                    <td><?= htmlspecialchars($l['membership_name'] !== '' ? $l['membership_name'] : '—') ?></td>
+                    <td class="small">
+                        <strong><?= htmlspecialchars($l['name']) ?></strong>
+                        <?php if ($l['phone'] !== ''): ?><div><a href="tel:<?= htmlspecialchars(preg_replace('/\s+/', '', $l['phone'])) ?>"><?= htmlspecialchars($l['phone']) ?></a></div><?php endif; ?>
+                        <?php if ($l['email'] !== ''): ?><div><a href="mailto:<?= htmlspecialchars($l['email']) ?>"><?= htmlspecialchars($l['email']) ?></a></div><?php endif; ?>
+                        <?php if ($l['consent']): ?><span class="badge bg-success mt-1" title="<?= htmlspecialchars($l['consent_text'] . ' · IP ' . $l['ip']) ?>">RGPD <i class="bi bi-check-lg"></i></span><?php endif; ?>
+                    </td>
+                    <td class="small" style="max-width:260px;"><?= $l['message'] !== '' ? nl2br(htmlspecialchars($l['message'])) : '<span class="text-muted">—</span>' ?></td>
+                    <td>
+                        <div class="d-flex gap-1 mb-1">
+                            <select class="form-select form-select-sm" name="status[<?= $id ?>]">
+                                <?php foreach ($statuses as $k => $label): ?>
+                                <option value="<?= $k ?>" <?= $l['status'] === $k ? 'selected' : '' ?>><?= $label ?></option>
+                                <?php endforeach; ?>
+                            </select>
+                            <span class="badge <?= $badge[$l['status']] ?? 'bg-secondary' ?> align-self-center"><?= htmlspecialchars($statuses[$l['status']] ?? $l['status']) ?></span>
+                        </div>
+                        <textarea class="form-control form-control-sm" name="notes[<?= $id ?>]" rows="2" placeholder="Notas internas"><?= htmlspecialchars((string) $l['admin_notes']) ?></textarea>
+                    </td>
+                    <td class="text-nowrap">
+                        <button class="btn btn-sm btn-outline-primary" name="save" value="<?= $id ?>" title="Guardar"><i class="bi bi-check-lg"></i></button>
+                        <button class="btn btn-sm btn-outline-danger" name="delete" value="<?= $id ?>" title="Apagar" onclick="return confirm('Apagar este pedido?')"><i class="bi bi-trash"></i></button>
+                    </td>
+                </tr>
+            <?php endforeach; endif; ?>
+            </tbody>
+        </table>
+        </div>
+    </div></form>
+</div>
+<?php include __DIR__ . '/../../../includes/footer.php';