feat: Implement Secure R2 Storage with Private Bucket and Proxy Controller

app/Models/TicketAttachment.php

@@ -22,4 +22,18 @@ class TicketAttachment extends Model
     {
         return $this->belongsTo(TicketReply::class, 'ticket_reply_id');
     }
+
+    protected $appends = ['download_url'];
+
+    public function getDownloadUrlAttribute()
+    {
+        // Legacy: if it's already a full URL, return it
+        if (filter_var($this->file_path, FILTER_VALIDATE_URL)) {
+             return $this->file_path;
+        }
+
+        // Secure: return the API endpoint
+        // Assuming route prefix is /api (standard Laravel)
+        return url("/api/support/attachments/{$this->id}");
+    }
 }