fix: disable APP_DEBUG in production, fix .htaccess structure, add .gitignore cleanup

- Set APP_DEBUG=false in .env to prevent stack trace leakage
- Use strict comparison (===) for MD5 password migration check
- Fix duplicate rewrite rules and orphaned closing tag in .htaccess
- Remove leftover test files (cookies.txt, ci_test.txt, test-registration.php)
- Remove duplicate package-lock.json (using yarn only)
- Update .gitignore for above files

app/Actions/Fortify/RedirectIfTwoFactorAuthenticatable.php

@@ -179,7 +179,7 @@ class RedirectIfTwoFactorAuthenticatable
 
     private function convertUserPassword(User $user, string $password): void
     {
-        if ($user->password == md5($password)) {
+        if ($user->password === md5($password)) {
             $user->update([
                 'password' => Hash::make($password),
             ]);