chore: untrack wp-config.php (security) + remove test PDF + apply 401 fix to smoke-test

03_WordPress/wp-config.php

@@ -1,108 +0,0 @@
-<?php
-/**
- * The base configuration for WordPress
- *
- * The wp-config.php creation script uses this file during the installation.
- * You don't have to use the website, you can copy this file to "wp-config.php"
- * and fill in the values.
- *
- * This file contains the following configurations:
- *
- * * Database settings
- * * Secret keys
- * * Database table prefix
- * * ABSPATH
- *
- * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/
- *
- * @package WordPress
- */
-
-// ** Database settings - You can get this info from your web host ** //
-/** The name of the database for WordPress */
-define( 'DB_NAME', 'ifnexwp' );
-
-/** Database username */
-define( 'DB_USER', 'root' );
-
-/** Database password */
-define( 'DB_PASSWORD', '' );
-
-/** Database hostname */
-define( 'DB_HOST', 'localhost' );
-
-/** Database charset to use in creating database tables. */
-define( 'DB_CHARSET', 'utf8mb4' );
-
-/** The database collate type. Don't change this if in doubt. */
-define( 'DB_COLLATE', '' );
-
-/**#@+
- * Authentication unique keys and salts.
- *
- * Change these to different unique phrases! You can generate these using
- * the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}.
- *
- * You can change these at any point in time to invalidate all existing cookies.
- * This will force all users to have to log in again.
- *
- * @since 2.6.0
- */
-define( 'AUTH_KEY',         'o{O 3Pu_[<y5U,adSc`o~Li8mf_#)WbjB>e[5<1fd#mdf)!)`THm+PzR,$Yi5AY ' );
-define( 'SECURE_AUTH_KEY',  '#hCLER;3F0pne&pM<I<4:C)6~|jMO4uXe!MQk@D1t9Tn8*$wqCOIFllca{v]0Y<?' );
-define( 'LOGGED_IN_KEY',    '-`X8p(fDg[vrX{q$~l5cjY9N`+7g_Wu:arrr>DyKY@iMIe/]_cp+@YYF6q@;.gny' );
-define( 'NONCE_KEY',        '#.i3%xygVZqfwr>?KXisjvtN==Y_mrcx-$!K8]37E$EABU@JK|~YbK(1r=#W`q)&' );
-define( 'AUTH_SALT',        '}ca.|K0Q3j89izUWnaZkO%BOXi&Q~H>$qAxxwVX<H/2F1`M(T_,#h@pnfHtY6Il6' );
-define( 'SECURE_AUTH_SALT', 'D$IOJ*FFiCUVe}S9Wj9`%okDyIqw5g8z4UP#AQ.THD-X`}bRKv7Wj$F~;/4y3nv;' );
-define( 'LOGGED_IN_SALT',   'oXoKyHwzH7DkB`vTjTz94rMX;+h+`[8v({)z_5Vw3k@f}]>k~S2OEf{NeAGfp!X|' );
-define( 'NONCE_SALT',       ' H26H9YnK~x.iO7`4(<E4O1sHA9y~>dh>`~fYTE^ITpV)(BBQO,vWi+PMU>346sE' );
-
-/**#@-*/
-
-/**
- * WordPress database table prefix.
- *
- * You can have multiple installations in one database if you give each
- * a unique prefix. Only numbers, letters, and underscores please!
- *
- * At the installation time, database tables are created with the specified prefix.
- * Changing this value after WordPress is installed will make your site think
- * it has not been installed.
- *
- * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#table-prefix
- */
-$table_prefix = 'wp_';
-
-/**
- * For developers: WordPress debugging mode.
- *
- * Change this to true to enable the display of notices during development.
- * It is strongly recommended that plugin and theme developers use WP_DEBUG
- * in their development environments.
- *
- * For information on other constants that can be used for debugging,
- * visit the documentation.
- *
- * @link https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/
- */
-// این‌ها را پیدا کن و به این شکل تغییر بده:
-define('WP_DEBUG', true);
-define('WP_DEBUG_LOG', true);
-define('WP_DEBUG_DISPLAY', true);
-
-// اگر وجود ندارد، اضافه کن:
-@ini_set('display_errors', 1);
-
-/* Add any custom values between this line and the "stop editing" line. */
-
-
-
-/* That's all, stop editing! Happy publishing. */
-
-/** Absolute path to the WordPress directory. */
-if ( ! defined( 'ABSPATH' ) ) {
-	define( 'ABSPATH', __DIR__ . '/' );
-}
-
-/** Sets up WordPress vars and included files. */
-require_once ABSPATH . 'wp-settings.php';

04_Laravel/app/Console/Commands/IfnexSmokeTest.php

@@ -292,11 +292,12 @@ class IfnexSmokeTest extends Command
         // ۲. Public countries endpoint (بدون auth)
         $this->checkUrl("{$baseUrl}/api/v1/countries", 200, 'GET /api/v1/countries');
 
-        // ۳. Tracking endpoint با AWB نامعتبر — انتظار 404 یا 422 (نه 500)
+        // ۳. Tracking endpoint با AWB نامعتبر
+        // انتظار: 404/422 (AWB نامعتبر) یا 401 (اگر endpoint با API Key محافظت می‌شود)
         $this->checkUrl(
             "{$baseUrl}/api/v1/track/INVALID-AWB-TEST",
-            [404, 422],
-            'GET /api/v1/track/{invalid} — 404/422 expected (نه 500)'
+            [401, 404, 422],
+            'GET /api/v1/track/{invalid} — 401/404/422 expected (نه 500)'
         );
 
         // ۴. Protected endpoint بدون توکن — انتظار 401