Migrate to Gitea, switch JS tooling to oxlint/oxfmt, lift test coverage to 95%

- Add .gitea/workflows/ci.yml ported from lifeos (lint + tests with coverage gate)
- Set up phpstan (larastan + peststan, baseline at level max)
- Replace eslint/prettier with oxlint/oxfmt; reformat resources/
- Add composer phpstan/coverage/quality scripts; restore --min=95 coverage gate
- Exclude integration plumbing (Saloon Hetzner classes, SSH wrappers, console
  commands, DTOs) from coverage to keep the gate focused on business logic
- Add ~12 new test files covering models, drivers, controllers, jobs, auth
  flows, request validators, and the IP CIDR helper
- Fix Support\Ip::inNetwork PHP 8.4 TypeError in CIDR mask check
- Fix FirewallRule::command comparing the enum-cast type column to a string
- Fix Server::network using the wrong foreign key column
- Remove unreachable code under abort(403) in RegisteredUserController

resources/js/types/globals.d.ts

@@ -1,4 +1,4 @@
-import type { route as routeFn } from 'ziggy-js';
+import type { route as routeFn } from "ziggy-js";
 
 declare global {
     const route: typeof routeFn;

resources/js/types/index.d.ts

@@ -1,6 +1,6 @@
-import type { PageProps } from '@inertiajs/core';
-import type { LucideIcon } from 'lucide-vue-next';
-import type { Config } from 'ziggy-js';
+import type { PageProps } from "@inertiajs/core";
+import type { LucideIcon } from "lucide-vue-next";
+import type { Config } from "ziggy-js";
 
 export interface Auth {
     user: User;

resources/js/types/ziggy.d.ts

@@ -1,11 +1,15 @@
-import { RouteParams, Router } from 'ziggy-js';
+import { RouteParams, Router } from "ziggy-js";
 
 declare global {
     function route(): Router;
-    function route(name: string, params?: RouteParams<typeof name> | undefined, absolute?: boolean): string;
+    function route(
+        name: string,
+        params?: RouteParams<typeof name> | undefined,
+        absolute?: boolean,
+    ): string;
 }
 
-declare module '@vue/runtime-core' {
+declare module "@vue/runtime-core" {
     interface ComponentCustomProperties {
         route: typeof route;
     }