Add PHP Analyzer Plugin and Composer Lock Data Handling

- Implemented the PhpAnalyzerPlugin to analyze PHP projects.
- Created ComposerLockData class to represent data from composer.lock files.
- Developed ComposerLockReader to load and parse composer.lock files asynchronously.
- Introduced ComposerPackage class to encapsulate package details.
- Added PhpPackage class to represent PHP packages with metadata and evidence.
- Implemented PhpPackageCollector to gather packages from ComposerLockData.
- Created PhpLanguageAnalyzer to perform analysis and emit results.
- Added capability signals for known PHP frameworks and CMS.
- Developed unit tests for the PHP language analyzer and its components.
- Included sample composer.lock and expected output for testing.
- Updated project files for the new PHP analyzer library and tests.

src/Findings/StellaOps.Findings.Ledger/Services/LedgerProjectionReducer.cs

@@ -22,6 +22,11 @@ public static class LedgerProjectionReducer
 
         var status = evaluation.Status ?? DetermineStatus(record.EventType, payload, current?.Status);
         var severity = evaluation.Severity ?? DetermineSeverity(payload, current?.Severity);
+        var riskScore = evaluation.RiskScore ?? current?.RiskScore;
+        var riskSeverity = evaluation.RiskSeverity ?? current?.RiskSeverity;
+        var riskProfileVersion = evaluation.RiskProfileVersion ?? current?.RiskProfileVersion;
+        var riskExplanationId = evaluation.RiskExplanationId ?? current?.RiskExplanationId;
+        var riskEventSequence = evaluation.RiskEventSequence ?? current?.RiskEventSequence ?? record.SequenceNumber;
 
         var labels = CloneLabels(evaluation.Labels);
         MergeLabels(labels, payload);
@@ -41,6 +46,11 @@ public static class LedgerProjectionReducer
             record.PolicyVersion,
             status,
             severity,
+            riskScore,
+            riskSeverity,
+            riskProfileVersion,
+            riskExplanationId,
+            riskEventSequence,
             labels,
             record.EventId,
             explainRef,