[codex] Prepare showcase for senior Symfony review

[roadynet]

Summary

• Add Composer-based reproducible verification with composer verify and a separate composer smoke:public live check.
• Add a repeatable tests/showcase_audit.py public-safety audit for env-file policy, obvious secret patterns, private-code path leakage, local Markdown links, screenshots, wording consistency, and phpunit.xml parsing.
• Run the Portfolio Audit workflow through Composer so local review and CI use the same entrypoint.
• Add PHPStan level: max for the public PHP examples and lock the toolchain through composer.lock.
• Add a Senior Symfony review guide, ADRs, and a security/privacy boundary document.
• Add PHPUnit coverage for the public next-due-question example so the showcase demonstrates testable business rules beyond scheduling and parsing.
• Document public live readiness evidence for the canonical public demo routes and security headers.

Validation

• Fresh temp-copy CI simulation:
  • composer validate --strict --no-check-publish
  • composer install --no-interaction --prefer-dist --no-progress
  • composer verify
  • composer smoke:public
• composer verify covers PHP syntax lint, PHPStan, PHPUnit, and public showcase audit.
• PHPUnit result: 7 tests, 10 assertions, OK.
• PHPStan result: no errors.
• Public live smoke: /health, /login, /register, /impressum, /dsgvo all 200 with CSP, nosniff, and frame protection.
• git diff --check passed.

Notes

• No demo credentials are published.
• .env.example remains placeholder-only.
• The private application repository remains separate from this public showcase.
• Required CI intentionally does not call the live smoke command because production/network availability should not block documentation-only PRs.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.