1.4.0

Added

• Public app store. A new public SPA at /store (with a detail page at /store/apps/{id}) lists
  every app that belongs to a domain flagged Public and has at least one published version, and
  installs its published .apk — no account required. Domains gain an is_public flag (new migration,
  plus a boolean cast, toArray() and both validation rule sets — the rules are the write whitelist)
  toggled from the domain form under the existing domain.update permission. Domains stay private by
  default.
  • Public JSON API, unauthenticated and throttled: GET /api/public/apps (search, domain,
    pagination), GET /api/public/domains, GET /api/public/apps/{app} and
    GET /api/public/apps/{app}/download. PublicStoreController builds its own response shapes and
    never returns the version api_key, stored file names or filesystem paths.
  • …/download streams the app's latest version when published (else the newest published one) and
    records a DownloadHistory row.
  • /store is the fifth Vite/React entry (resources/js/apps/store) with its own Blade shell, and a
    Store link in the public site header and footer.

Changed

• npm run build now compiles five SPAs (home, store, docs, auth, dashboard).