Allow heading tags (h1-h6) in ContentSanitizer so news editor headings render

app/Http/Controllers/Academy/AcademyLessonController.php

@@ -13,6 +13,7 @@ use App\Services\Academy\AcademyCacheService;
 use App\Services\Academy\AcademyInteractionService;
 use App\Support\AcademyAnalytics\AcademyAnalyticsContentType;
 use App\Support\Seo\SeoFactory;
+use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Str;
 use Inertia\Inertia;
@@ -27,7 +28,7 @@ final class AcademyLessonController extends Controller
         private readonly AcademyInteractionService $interactions,
     ) {}
 
-    public function index(Request $request): Response
+    public function index(Request $request): Response|JsonResponse
     {
         abort_unless((bool) config('academy.enabled', true), 404);
 
@@ -65,6 +66,10 @@ final class AcademyLessonController extends Controller
             $this->analytics->trackSearch((string) $filters['q'], (int) $lessons->total(), array_filter($filters), $request);
         }
 
+        if ($request->expectsJson()) {
+            return response()->json($lessons);
+        }
+
         $seo = app(SeoFactory::class)
             ->collectionListing(
                 'Academy Lessons — Skinbase',
@@ -78,10 +83,21 @@ final class AcademyLessonController extends Controller
             'title' => 'Academy lessons',
             'description' => 'Step-by-step tutorials and workflow guides for AI-assisted creative work on Skinbase.',
             'seo' => $seo,
+            'breadcrumbs' => [
+                ['label' => 'Academy', 'href' => route('academy.index')],
+                ['label' => 'Lessons', 'href' => route('academy.lessons.index')],
+            ],
             'items' => $lessons,
             'filters' => $filters,
             'categories' => $this->cache->categoriesByType('lesson'),
             'pricingUrl' => route('academy.pricing'),
+            'coursesUrl' => route('academy.courses.index'),
+            'promptLibraryUrl' => route('academy.prompts.index'),
+            'academyAccess' => array_merge($this->access->accessSummary($request->user()), [
+                'billingUrl' => $request->user() && (bool) config('academy_billing.enabled', false)
+                    ? route('academy.billing.account')
+                    : route('academy.pricing'),
+            ]),
             'analytics' => [
                 'enabled' => true,
                 'contentType' => filled($filters['q'] ?? null) ? AcademyAnalyticsContentType::SEARCH : null,