feat: Add complete reviews system with star ratings

✨ New Features:
- Reviews system with 1-5 star ratings
- User can add, edit, and delete their own reviews
- One review per product per user (DB constraint)
- Automatic average rating calculation
- Review count tracking
- Interactive star selection UI
- AJAX-powered review submission
- Responsive design for all devices

🗄️ Database:
- New 'reviews' table with full structure
- Added 'rating' and 'review_count' fields to products
- PostgreSQL triggers for automatic rating updates
- Database functions for rating calculations
- Indexes for performance optimization

📦 Backend (PHP):
- Review model with 15+ methods
- ReviewController with 5 actions
- Updated Product model to include ratings
- Updated ProductController to load reviews
- 5 new API endpoints

🎨 Frontend:
- Reviews list component (_reviews_list.php)
- Review form component (_review_form.php)
- Reviews sechow page
- Star ratings in catalog view
- Interactive JavaScript (200+ lines)
- Adaptive styles (400+ lines)

🔒 Security:
- Server-side authorization checks
- XSS protection (htmlspecialchars)
- SQL injection protection (PDO prepared)
- Input validation (client + server)
- Access control for review editing

📝 Modified Files:
- app/Models/Product.php - added rating fields to queries
- app/Controllers/ProductController.php - loads reviews
- app/Views/products/show.php - reviews section
- app/Views/products/catalog.php - star ratings
- config/routes.php - review endpoints
- public/style_for_cite.less - rating styles

🆕 New Files:
- app/Models/Review.php
- app/Controllers/ReviewController.php
- app/Views/products/_reviews_list.php
- app/Views/products/_review_form.php

app/Controllers/CartController.php

@@ -21,6 +21,11 @@ class CartController extends Controller
     {
         $this->requireAuth();
 
+        if ($this->isAdmin()) {
+            $this->redirect('/catalog');
+            return;
+        }
+
         $user = $this->getCurrentUser();
         $cartItems = $this->cartModel->getUserCart($user['id']);
         $totals = $this->cartModel->getCartTotal($user['id']);
@@ -43,6 +48,14 @@ class CartController extends Controller
             return;
         }
 
+        if ($this->isAdmin()) {
+            $this->json([
+                'success' => false,
+                'message' => 'Доступ запрещен'
+            ]);
+            return;
+        }
+
         $productId = (int) $this->getPost('product_id', 0);
         $quantity = (int) $this->getPost('quantity', 1);
         $userId = $this->getCurrentUser()['id'];
@@ -104,6 +117,14 @@ class CartController extends Controller
             return;
         }
 
+        if ($this->isAdmin()) {
+            $this->json([
+                'success' => false,
+                'message' => 'Доступ запрещен'
+            ]);
+            return;
+        }
+
         $productId = (int) $this->getPost('product_id', 0);
         $quantity = (int) $this->getPost('quantity', 1);
         $userId = $this->getCurrentUser()['id'];
@@ -154,6 +175,14 @@ class CartController extends Controller
             return;
         }
 
+        if ($this->isAdmin()) {
+            $this->json([
+                'success' => false,
+                'message' => 'Доступ запрещен'
+            ]);
+            return;
+        }
+
         $productId = (int) $this->getPost('product_id', 0);
         $userId = $this->getCurrentUser()['id'];