Add PHP Analyzer Plugin and Composer Lock Data Handling

- Implemented the PhpAnalyzerPlugin to analyze PHP projects.
- Created ComposerLockData class to represent data from composer.lock files.
- Developed ComposerLockReader to load and parse composer.lock files asynchronously.
- Introduced ComposerPackage class to encapsulate package details.
- Added PhpPackage class to represent PHP packages with metadata and evidence.
- Implemented PhpPackageCollector to gather packages from ComposerLockData.
- Created PhpLanguageAnalyzer to perform analysis and emit results.
- Added capability signals for known PHP frameworks and CMS.
- Developed unit tests for the PHP language analyzer and its components.
- Included sample composer.lock and expected output for testing.
- Updated project files for the new PHP analyzer library and tests.

tools/linksets-ci.sh

@@ -8,6 +8,10 @@ if [[ -z "$DOTNET_EXE" ]]; then
   echo "dotnet not found" >&2; exit 1; fi
 export VSTEST_DISABLE_APPDOMAIN=1
 export DOTNET_CLI_UI_LANGUAGE=en
+export DOTNET_CLI_TELEMETRY_OPTOUT=1
+# Prefer the curated offline feed to avoid network flakiness during CI.
+export NUGET_PACKAGES="${ROOT_DIR}/local-nugets"
+RESTORE_SOURCE="--source ${ROOT_DIR}/local-nugets --ignore-failed-sources"
 # Ensure Mongo2Go can find OpenSSL 1.1 (needed by bundled mongod)
 OPENSSL11_DIR="$ROOT_DIR/tools/openssl1.1/lib"
 if [[ -d "$OPENSSL11_DIR" ]]; then
@@ -15,4 +19,6 @@ if [[ -d "$OPENSSL11_DIR" ]]; then
 fi
 RESULTS_DIR="$ROOT_DIR/out/test-results/linksets"
 mkdir -p "$RESULTS_DIR"
-exec "$ROOT_DIR/tools/dotnet-filter.sh" test "$PROJECT" --filter "Linksets" --results-directory "$RESULTS_DIR" --logger "trx;LogFileName=linksets.trx" --no-build
+# Restore explicitly against offline cache, then run tests without restoring again.
+"$ROOT_DIR/tools/dotnet-filter.sh" restore "$PROJECT" $RESTORE_SOURCE
+exec "$ROOT_DIR/tools/dotnet-filter.sh" test "$PROJECT" --no-restore --filter "Linksets" --results-directory "$RESULTS_DIR" --logger "trx;LogFileName=linksets.trx"