28. Authorization: Gates & Policies

Gates are simple closures defining whether a user can perform an action (Gate::define('edit-post', ...)), useful for actions not tied to a specific model. Policies are classes organizing authorization logic per model, with methods like view, update, and delete, and are checked via $this->authorize() or @can in Blade. Policies are auto-discovered or registered in a service provider.