Initial commit: TravelHub multi-tenant flight booking platform

Angular + Go + PostgreSQL sample with strict per-tenant isolation.

- Backend: Go API (basic auth, tenant-scoped repository layer, pgx pool)
- Frontend: Angular 22 SPA (search, checkout, bookings, dashboard)
- Database: schema, seed data and demo bookings migrations
- Tests: 311 across Go (integration), Angular (unit) and Playwright (e2e),
  plus a generated evidence report with PDF export
- Security: whitebox VAPT report under security/

Secrets (.env, tokens, DB credentials) are git-ignored.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitignore

@@ -0,0 +1,36 @@
+# --- secrets ----------------------------------------------------------------
+.env
+*.env
+!.env.example
+
+# --- go ---------------------------------------------------------------------
+backend/bin/
+backend/api
+backend/api.exe
+*.exe
+*.test
+
+# --- node / angular ---------------------------------------------------------
+node_modules/
+frontend/dist/
+frontend/.angular/
+frontend/tmp/
+npm-debug.log*
+yarn-error.log*
+
+# --- editors / os -----------------------------------------------------------
+.vscode/*
+!.vscode/extensions.json
+.idea/
+.DS_Store
+Thumbs.db
+
+# --- test artifacts ---------------------------------------------------------
+e2e/node_modules/
+e2e/test-results/
+e2e/playwright-report/
+e2e/playwright/.cache/
+backend/coverage.out
+frontend/coverage/
+e2e/evidence-report/
+e2e/**/*.pdf