Fix #18: Exception leak remediation across 87 PHP files

- Replaced all client-facing $e->getMessage() with generic error messages
- Added error_log() with filename prefix to all catch blocks
- Covered jsonError(), echo, and json_encode() response patterns
- Also fixed 2 remaining display_errors=1 and add_invoice.php leak
- Script-assisted fix for 75 files, manual fix for 12 remaining edge cases

backend/Admin/Staff/activate.php

@@ -49,6 +49,6 @@ try {
     }
 } catch (Exception $e) {
     error_log("[Staff Activate Error] " . $e->getMessage());
-    jsonError("خطأ في السيرفر: " . $e->getMessage());
+    jsonError("An internal error occurred. Please try again later.");
 }
 exit();