ci: audit dependencies with composer audit

[roxblnfk]

🔍 What was changed

• New Security analysis workflow: on every PR and push to 2.x it validates composer.json, installs the highest dependencies on PHP 8.1 (the minimum from require.php) and runs composer audit.
• The repository had no roave/security-advisories to remove.

Checklist

• How was this tested:
  • composer validate --strict, composer update and composer audit pass locally (PHP 8.4)

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 77de8cf7-f33e-4587-bd49-e03d7dbc2c9f

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}