ci: add PHP 8.4 and 8.5 quality matrix

[josiahking]

Summary

Adds the GitHub Actions quality foundation for EvolvePHP 2 and records successful PHP 8.4 and PHP 8.5 CI evidence for the current workspace, quality tooling and package foundation.

The EvolvePHP 2 runtime remains incomplete. This PR does not make a production-readiness or complete runtime-compatibility claim.

Changes

• adds .github/workflows/quality.yml
• adds a dedicated CI architecture-policy test
• adds a separate PHP 8.4 root-policy job
• adds a PHP 8.4 and PHP 8.5 workspace quality matrix
• validates the committed workspace lockfile before installation
• installs workspace dependencies with composer install
• runs the approved aggregate workspace quality command
• pins third-party actions to immutable commit SHAs
• documents CI ownership and compatibility-evidence boundaries
• records successful initial CI execution
• updates documentation-policy tests to enforce the evidence wording

Workflow

Policy job — PHP 8.4

Validates:

• workspace Composer manifest and lockfile
• root Architecture tests
• root Documentation tests

The root policy suites run through workspace PHPUnit. The preserved EvolvePHP 1 runtime is excluded from the EvolvePHP 2 compatibility claim.

Workspace quality matrix

Runs complete workspace quality on:

• PHP 8.4
• PHP 8.5

Each matrix job runs:

• strict Composer and lockfile validation
• lockfile-based dependency installation
• Deptrac
• PHPStan
• PHP-CS-Fixer check
• workspace PHPUnit tests

Security and supply chain

• workflow permission limited to contents: read
• checkout credentials are not persisted
• actions pinned to reviewed full commit SHAs
• no secrets
• no deployment or publishing
• no coverage or artifact upload
• no dependency cache
• no platform-requirement bypass
• no Composer update

Local Validation

• CI policy test: 8 tests, 116 assertions
• Architecture suite: 47 tests, 2,869 assertions
• Documentation suite: 89 tests, 878 assertions
• complete root suite: 136 tests, 3,747 assertions
• PHP 8.4 policy execution: 136 tests, 3,747 assertions
• workspace PHPUnit: 6 tests, 18 assertions
• Deptrac: 0 violations and 0 errors
• PHPStan: no errors
• PHP-CS-Fixer: 0 files fixable
• aggregate workspace quality passed

GitHub CI Evidence

Initial workflow run 31019134864 succeeded for the CI-foundation commit.

Final workflow run 31021436422 succeeded for commit:

f024ce2721248ab010aed1f9ba4962d888c1e619

Successful final jobs:

• Policy (PHP 8.4)
• Workspace quality (PHP 8.4)
• Workspace quality (PHP 8.5)

Evidence Boundary

The verified compatibility applies to the current EvolvePHP 2 workspace, quality tooling and package foundation.

The EvolvePHP 2 runtime implementation remains incomplete, packages remain unpublished, and no production-readiness claim is made.