feat: token-secured guest invites, product freeze lock during active events, Outlook ics export and template, realistic test data

app/templates/index.html

@@ -9,7 +9,7 @@
     <span>📅 Weitere offene Termine:</span>
     <div class="multi-event-chips">
       {% for ev in open_events %}
-      <a href="/?event_id={{ ev.id }}{% if is_guest_mode %}&guest=1{% endif %}" class="mini-chip {% if event and event.id == ev.id %}active{% endif %}">
+      <a href="/?event_id={{ ev.id }}{% if is_valid_guest %}&token={{ guest_token }}{% endif %}" class="mini-chip {% if event and event.id == ev.id %}active{% endif %}">
         {{ ev.event_date.strftime('%d.%m.') }} – {{ ev.title }}
       </a>
       {% endfor %}
@@ -56,6 +56,7 @@
   <!-- Order Form -->
   <form action="/order" method="POST" class="order-form" id="orderForm">
     <input type="hidden" name="event_id" value="{{ event.id }}">
+    <input type="hidden" name="guest_token" value="{{ guest_token }}">
 
     <div class="form-grid">
       <!-- Left: Products -->
@@ -92,7 +93,7 @@
         <div class="summary-card">
           <h2>2. Angaben & Übersicht</h2>
           
-          {% if current_user and not is_guest_mode %}
+          {% if current_user %}
           <div class="logged-in-badge">
             <div class="user-avatar">👤</div>
             <div>