feat: VivesPOS landing on Winter CMS 1.2 — theme + plugin + Dockerfile

- Base: wintercms/winter branch 1.2 (full framework)
- Theme vivespos: Canvas 7 + Bootstrap 5 CDN, custom CSS
- Layout: deferred GTM/GA4 tracking, JSON-LD SoftwareApplication
- Partials: hero (offline-first), features, modes (offline/nube toggle),
  screenshots, pricing (3 planes), comparison, FAQ, CTA
- Plugin VivesPOS.Site with ContactForm
- Dockerfile: PHP 8.2 Apache, port 80, healthcheck
- Added winter/wn-pages, blog, sitemap, seo plugins
- Active theme set to vivespos

modules/cms/tests/widgets/AssetListPermissionTest.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace Cms\Tests\Widgets;
+
+use Backend\Tests\Fixtures\Models\UserFixture;
+use Cms\Controllers\Index;
+use Illuminate\Support\Facades\Request;
+use System\Tests\Bootstrap\PluginTestCase;
+use Winter\Storm\Exception\ApplicationException;
+
+class AssetListPermissionTest extends PluginTestCase
+{
+    public function testOnUploadRejectsThemeMismatch(): void
+    {
+        $user = (new UserFixture)->withPermission('cms.manage_assets', true);
+        $this->actingAs($user);
+        $controller = new Index;
+
+        $assetList = $controller->widget->assetList;
+        $this->assertNotNull($assetList, 'assetList widget should be registered');
+
+        // Simulate a request with a mismatched theme name
+        Request::merge(['theme' => 'nonexistent-theme']);
+
+        $this->expectException(ApplicationException::class);
+        $assetList->onUpload();
+    }
+}