ci: alignement sur le standard qualite (Larastan, couverture, SonarQube) et deploiement SSH

- ci.yml: ajout analyse statique PHPStan/Larastan, couverture PHPUnit (clover+junit) et analyse SonarQube conditionnelle
- deploy.yml: deploiement continu par SSH (git reset + docker compose up --build + migrations + cache), conteneur cesizen-app
- phpstan.neon (niveau 5), grumphp.yml (hooks qualite locaux), sonar-project.properties, docker-compose.sonar.yml
- ajout larastan/larastan et phpro/grumphp en require-dev

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

WEB/composer.json

@@ -16,11 +16,13 @@
     },
     "require-dev": {
         "fakerphp/faker": "^1.23",
+        "larastan/larastan": "^3.0",
         "laravel/pail": "^1.2.2",
         "laravel/pint": "^1.24",
         "laravel/sail": "^1.41",
         "mockery/mockery": "^1.6",
         "nunomaduro/collision": "^8.6",
+        "phpro/grumphp": "^2.5",
         "phpunit/phpunit": "^11.5.50"
     },
     "autoload": {
@@ -75,6 +77,9 @@
     "extra": {
         "laravel": {
             "dont-discover": []
+        },
+        "grumphp": {
+            "disable-plugin": true
         }
     },
     "config": {
@@ -84,7 +89,8 @@
         "platform-check": false,
         "allow-plugins": {
             "pestphp/pest-plugin": true,
-            "php-http/discovery": true
+            "php-http/discovery": true,
+            "phpro/grumphp": true
         }
     },
     "minimum-stability": "stable",