Valida concorrencia e aplica orcamento com recuperacao verificada

app/Services/BudgetWorkflow.php

@@ -6,6 +6,7 @@ use App\Models\Budget;
 use App\Models\BudgetEntry;
 use App\Models\Requisition;
 use App\Models\User;
+use Illuminate\Support\Facades\DB;
 use Illuminate\Validation\ValidationException;
 
 class BudgetWorkflow
@@ -15,6 +16,11 @@ class BudgetWorkflow
      */
     public function record(User $user, Requisition $request, string $kind, int $amount = 0, ?int $subtotal = null): ?array
     {
+        abort_unless(auth()->id() === $user->id && $user->tenant_id !== null && $request->tenant_id === $user->tenant_id, 403);
+        if (DB::connection()->transactionLevel() === 0) {
+            throw new \LogicException('Movimentos de orçamento exigem transacção.');
+        }
+        app(ConflictGuard::class)->lockCompany($user);
         $existing = BudgetEntry::query()->where('requisition_id', $request->id)->orderBy('id')->first();
         $budget = $existing
             ? Budget::query()->lockForUpdate()->findOrFail($existing->budget_id)