Implement verified curriculum, video review, watch sessions, ledger safeguards, and remove demo data

backend/app/Services/StudentAccessControlService.php

@@ -37,7 +37,8 @@ class StudentAccessControlService
         ?string $nationalId,
         string $targetGrade,
         ?int $courseId = null,
-        ?int $lessonId = null
+        ?int $lessonId = null,
+        bool $allowSideEffects = true
     ): array {
         // 1. استرجاع بيانات الطالب وسجله الدراسي
         $student = null;
@@ -90,7 +91,7 @@ class StudentAccessControlService
 
         // Auto-heal obsolete database schema default:
         // If student was recorded with the old default 'tawjihi_2008' or empty and target is grade_10
-        if (($student['grade_level'] === 'tawjihi_2008' || empty($student['grade_level'])) && $normalizedTargetGrade === 'grade_10') {
+        if ($allowSideEffects && ($student['grade_level'] === 'tawjihi_2008' || empty($student['grade_level'])) && $normalizedTargetGrade === 'grade_10') {
             Database::query("UPDATE students SET grade_level = 'grade_10', updated_at = NOW() WHERE id = ?", [(int)$student['id']]);
             $student['grade_level'] = 'grade_10';
             $activeStudentGrade = 'grade_10';
@@ -101,7 +102,7 @@ class StudentAccessControlService
         // أما الطلبة المستقلون وحسابات التجربة والتعلم الحر، فيتم تحديث صفهم النشط تلقائياً وفق المحتوى المختار
         $isCohortLocked = !empty($student['is_school_sponsored']) || !empty($student['school_id']);
         if ($activeStudentGrade !== $normalizedTargetGrade) {
-            if (!$isCohortLocked && !empty($student['id'])) {
+            if (!$isCohortLocked && !empty($student['id']) && $allowSideEffects) {
                 Database::query("UPDATE students SET grade_level = ? WHERE id = ?", [$normalizedTargetGrade, (int)$student['id']]);
                 $activeStudentGrade = $normalizedTargetGrade;
             } else {
@@ -126,7 +127,7 @@ class StudentAccessControlService
 
         if ($isMilitaryCulture || $isPrivateSponsored) {
             // الطالب مشمول مجاناً 100% (صفر دينار)
-            if ($courseId && !empty($student['id'])) {
+            if ($allowSideEffects && $courseId && !empty($student['id'])) {
                 self::ensureSchoolIncludedPass((int)$student['id'], $courseId);
             }