Low priority fixes: debug comments, Fortify cleanup, badge cost setting, profile query merge, User model fixes, VPN constructor cleanup, PayPal POST, PII removal, Dutch→English translations, duplicate rank check, CHANGELOG

CHANGELOG.md

@@ -0,0 +1,37 @@
+# Changelog
+
+## V3 — 2026-06-04
+
+### Added
+- Commandocentrum with Nitro V3 one-click updater
+- Configurable paths (9 settings) stored in DB via HK UI
+- Emulator start/stop/restart from admin panel
+- Live monitoring (online users, DB status, server load)
+- Hotel alert system
+- Emulator logs viewer
+- Clothing sync from FigureMap
+- Social login (Google, Discord, GitHub)
+- Staff activity log
+- Notification settings (email & Discord)
+- PHP 8.5 + Ubuntu 26.04 support
+- Dual .env system (Linux + Windows)
+- Bulletproof 12-step installation guide
+
+### Changed
+- Complete README rewrite with badges, tables, quick start
+- All Dutch comments translated to English
+- XAMPP support removed (security warning added)
+- `.env.example` → `.env.install` with step-by-step guide
+- `.env.standard` → `.env.example.linux` + `.env.example.windows`
+
+### Fixed
+- Removed debug comments from config/app.php
+- Removed commented Fortify features
+- Badge cost now configurable via `setting('badge_cost', 150)`
+- ProfileController: merged 2 setting queries into 1
+- User model: removed `save()` override that broke Eloquent expectations
+- User model: removed `id` from `$hidden` (was inconsistent with API exposure)
+- VPNCheckerMiddleware: removed empty constructor argument
+- PayPal process route: GET → POST
+- Discord webhook: no longer sends PII (email/IP)
+- API purchase: added rank duplicate check