Phase 7.1: Evolve Audit foundation

[josiahking]

Summary

• adds the initial Evolve Audit foundation inside evolvephp/dev-tools
• introduces structured audit findings, severity, reports, inspectors and runner orchestration
• adds a read-only Composer project inspector for existing PHP applications
• preserves raw PHP and dependency constraints
• detects supported framework evidence without claiming compatibility
• reports Composer platform PHP overrides as review evidence
• keeps target inspection static and non-executing
• keeps Audit distinct from Core Doctor findings

Safety boundaries

• no target PHP execution
• no target Composer script execution
• no framework bootstrapping
• no target autoloading
• no target writes
• no Composer manifest or lockfile changes
• no Core/HTTP/Module/Plugin/Testing changes
• no Bridge implementation

Validation

• root quality: 713 tests / 2567 assertions / 1 skipped
• PHPStan: clean
• PHP-CS-Fixer: clean
• release package validation: passed
• package split validation: deterministic/tree/inventory equality passed
• only evolvephp/dev-tools split changed
• skeleton create-project validation: passed
• prerelease consumer validation: passed
• source repository state preserved

Scope

12 paths:

• 8 added
• 4 modified
• 0 deleted