Replace Psalm with PHPStan, add Infection, bump PHP to 8.2+

- Replace vimeo/psalm with phpstan/phpstan ^2.1
- Add infection/infection ^0.29
- Bump rector/rector to ^2.0 (required for PHPStan 2)
- Bump PHP requirement to >=8.2
- Add bump-after-update config
- Remove PHP 8.1 from CI matrix
- Add CLAUDE.md

Author: loevgaard

.github/workflows/build.yaml

@@ -16,7 +16,6 @@ jobs:
             fail-fast: false
             matrix:
                 php-versions:
-                    - "8.1"
                     - "8.2"
                     - "8.3"
                     - "8.4"

CLAUDE.md

@@ -0,0 +1,38 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+This is a Composer meta-package (`setono/code-quality-pack`) that bundles PHP code quality tools into a single dev dependency. It contains no source code — only `composer.json` defining the bundled tools:
+
+- **ergebnis/composer-normalize** — composer.json normalization
+- **rector/rector** — automated refactoring
+- **sylius-labs/coding-standard** — coding standards (PHP CodeSniffer based)
+- **vimeo/psalm** — static analysis
+
+## Commands
+
+```bash
+# Install dependencies
+composer install
+
+# Validate composer.json
+composer validate --strict
+
+# Check composer.json normalization
+composer normalize --dry-run
+
+# Apply composer.json normalization
+composer normalize
+```
+
+## CI
+
+The GitHub Actions workflow (`.github/workflows/build.yaml`) runs on PHP 8.1–8.4 and validates `composer.json` (strict mode + normalization check). There are no tests to run.
+
+## Notes
+
+- `composer.lock` is committed to version control
+- The `dealerdirect/phpcodesniffer-composer-installer` plugin is explicitly disallowed in composer config
+- Psalm supports both v5 and v6 (`^5.26.1 || ^6.10.3`)

composer.json

@@ -4,17 +4,20 @@
     "license": "MIT",
     "type": "library",
     "require": {
-        "php": ">=8.1",
+        "php": ">=8.2",
         "ergebnis/composer-normalize": "^2.47",
-        "rector/rector": "^1.2.10",
-        "sylius-labs/coding-standard": "^4.4",
-        "vimeo/psalm": "^5.26.1 || ^6.10.3"
+        "infection/infection": "^0.29",
+        "phpstan/phpstan": "^2.1",
+        "rector/rector": "^2.0",
+        "sylius-labs/coding-standard": "^4.4"
     },
     "config": {
         "allow-plugins": {
             "dealerdirect/phpcodesniffer-composer-installer": false,
-            "ergebnis/composer-normalize": true
+            "ergebnis/composer-normalize": true,
+            "infection/extension-installer": true
         },
+        "bump-after-update": true,
         "sort-packages": true
     }
 }