Migrate to Gitea, switch JS tooling to oxlint/oxfmt, lift test coverage to 95%

- Add .gitea/workflows/ci.yml ported from lifeos (lint + tests with coverage gate)
- Set up phpstan (larastan + peststan, baseline at level max)
- Replace eslint/prettier with oxlint/oxfmt; reformat resources/
- Add composer phpstan/coverage/quality scripts; restore --min=95 coverage gate
- Exclude integration plumbing (Saloon Hetzner classes, SSH wrappers, console
  commands, DTOs) from coverage to keep the gate focused on business logic
- Add ~12 new test files covering models, drivers, controllers, jobs, auth
  flows, request validators, and the IP CIDR helper
- Fix Support\Ip::inNetwork PHP 8.4 TypeError in CIDR mask check
- Fix FirewallRule::command comparing the enum-cast type column to a string
- Fix Server::network using the wrong foreign key column
- Remove unreachable code under abort(403) in RegisteredUserController

resources/js/components/AppShell.vue

@@ -1,9 +1,9 @@
 <script setup lang="ts">
-import { SidebarProvider } from '@/components/ui/sidebar';
-import { onMounted, ref } from 'vue';
+import { SidebarProvider } from "@/components/ui/sidebar";
+import { onMounted, ref } from "vue";
 
 interface Props {
-    variant?: 'header' | 'sidebar';
+    variant?: "header" | "sidebar";
 }
 
 defineProps<Props>();
@@ -11,12 +11,12 @@ defineProps<Props>();
 const isOpen = ref(true);
 
 onMounted(() => {
-    isOpen.value = localStorage.getItem('sidebar') !== 'false';
+    isOpen.value = localStorage.getItem("sidebar") !== "false";
 });
 
 const handleSidebarChange = (open: boolean) => {
     isOpen.value = open;
-    localStorage.setItem('sidebar', String(open));
+    localStorage.setItem("sidebar", String(open));
 };
 </script>
 
@@ -24,7 +24,12 @@ const handleSidebarChange = (open: boolean) => {
     <div v-if="variant === 'header'" class="flex min-h-screen w-full flex-col">
         <slot />
     </div>
-    <SidebarProvider v-else :default-open="isOpen" :open="isOpen" @update:open="handleSidebarChange">
+    <SidebarProvider
+        v-else
+        :default-open="isOpen"
+        :open="isOpen"
+        @update:open="handleSidebarChange"
+    >
         <slot />
     </SidebarProvider>
 </template>