feat: SuperAdmin server-access kill switch gate

Add /super/settings endpoints and API middleware that returns generic 503 while keeping unlock routes whitelisted.

Co-authored-by: Cursor <cursoragent@cursor.com>

routes/web.php

@@ -13,9 +13,15 @@ use App\Mail\YourMailableClass;
 use Illuminate\Support\Facades\Mail;
 use Ramsey\Uuid\Uuid;
 use App\Http\Controllers\pay\PaymanController;
+use App\Http\Controllers\Super\SuperSettingsController;
 use App\Models\Message;
 use Illuminate\Http\Request;
 
+Route::middleware('superadmin.remote')->group(function () {
+    Route::get('/super/settings', [SuperSettingsController::class, 'show']);
+    Route::post('/super/settings', [SuperSettingsController::class, 'update']);
+});
+
 // وقتی public/storage symlink نیست یا فایل تازه فقط در storage/app/public است
 Route::get('storage/{path}', [PublicStorageController::class, 'show'])
     ->where('path', '.*');