Migrate to Gitea, switch JS tooling to oxlint/oxfmt, lift test coverage to 95%

- Add .gitea/workflows/ci.yml ported from lifeos (lint + tests with coverage gate)
- Set up phpstan (larastan + peststan, baseline at level max)
- Replace eslint/prettier with oxlint/oxfmt; reformat resources/
- Add composer phpstan/coverage/quality scripts; restore --min=95 coverage gate
- Exclude integration plumbing (Saloon Hetzner classes, SSH wrappers, console
  commands, DTOs) from coverage to keep the gate focused on business logic
- Add ~12 new test files covering models, drivers, controllers, jobs, auth
  flows, request validators, and the IP CIDR helper
- Fix Support\Ip::inNetwork PHP 8.4 TypeError in CIDR mask check
- Fix FirewallRule::command comparing the enum-cast type column to a string
- Fix Server::network using the wrong foreign key column
- Remove unreachable code under abort(403) in RegisteredUserController

resources/js/enums/ServiceCategory.js

@@ -1,20 +1,19 @@
-// This is a generated file. 
+// This is a generated file.
 
 export default {
-    "DATABASE": "database",
-    "APPLICATION": "application",
-    "GATEWAY": "gateway",
-    "STORAGE": "storage",
-    "CACHE": "cache",
-    "BUILDER": "builder"
-}
+    DATABASE: "database",
+    APPLICATION: "application",
+    GATEWAY: "gateway",
+    STORAGE: "storage",
+    CACHE: "cache",
+    BUILDER: "builder",
+};
 
 export const DescriptionMap = {
-    "DATABASE": "Postgres",
-    "APPLICATION": "The base container image for your application",
-    "GATEWAY": "The first point of contact for your application",
-    "STORAGE": "S3 or S3-compatible service",
-    "CACHE": "Valkey",
-    "BUILDER": "Build service for application artifacts"
-}
-
+    DATABASE: "Postgres",
+    APPLICATION: "The base container image for your application",
+    GATEWAY: "The first point of contact for your application",
+    STORAGE: "S3 or S3-compatible service",
+    CACHE: "Valkey",
+    BUILDER: "Build service for application artifacts",
+};