d8d2f37598
Audit J6: ProfileTab needs a full-profile update endpoint. Adds AuthController::updateProfile (first_name/last_name/phone/timezone), routed in the existing /api/auth auth:sanctum group; mirrors the sibling updateNotificationPreferences. userResource() now also returns phone + timezone so the GET /me round-trip carries them. phpstan-baseline.neon updated for Pest PendingCalls false positives in the new test file (same pattern as all other Feature test files). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>