fix: declare nikic/php-parser as runtime require, drop PhpParser whitelist

src/PHPStan/Rules/* uses PhpParser\Node\* classes at runtime. These were
previously satisfied transitively (via phpstan/phpstan) and the unknown
symbols whitelisted in qaConfig/composerRequireChecker.json to silence
composer-require-checker.

The new "DO NOT WHITELIST DEV-DEPENDENCY SYMBOLS" guidance correctly
flagged the recently introduced PhpParser\Node\Stmt\Property usage in
RequireReadonlyServiceRule.php (this symbol was not in the whitelist).

Correct fix per the new policy:
- Add nikic/php-parser ^5.0 to require (it IS a runtime dependency of
  the rules shipped in src/)
- Drop the now-unnecessary PhpParser\* whitelist entries

Verified locally: bin/qa -t cr -> "There were no unknown symbols found."
CI break (composer-require-checker exit 1) is now resolved.

Author: LTSCommerce

composer.json

@@ -12,6 +12,7 @@
     "composer-plugin-api": "^2.0",
     "ergebnis/composer-normalize": "^2.42",
     "funkyproject/reflection-file": "@stable",
+    "nikic/php-parser": "^5.0",
     "php-parallel-lint/php-console-color": "@stable",
     "php-parallel-lint/php-parallel-lint": "@stable",
     "phpstan/extension-installer": "@stable",

composer.lock

@@ -24,41 +24,6 @@
     "Composer\\Script\\Event",
     "Composer\\Script\\ScriptEvents",
     "Composer\\Semver\\Semver",
-    "PhpParser\\Comment",
-    "PhpParser\\Node",
-    "PhpParser\\NodeFinder",
-    "PhpParser\\Node\\Arg",
-    "PhpParser\\Node\\Attribute",
-    "PhpParser\\Node\\Expr\\BinaryOp",
-    "PhpParser\\Node\\Expr\\BinaryOp\\Coalesce",
-    "PhpParser\\Node\\Expr\\BinaryOp\\Concat",
-    "PhpParser\\Node\\Expr\\BinaryOp\\Equal",
-    "PhpParser\\Node\\Expr\\BinaryOp\\NotEqual",
-    "PhpParser\\Node\\Expr\\ClassConstFetch",
-    "PhpParser\\Node\\Expr\\ConstFetch",
-    "PhpParser\\Node\\Expr\\Empty_",
-    "PhpParser\\Node\\Expr\\FuncCall",
-    "PhpParser\\Node\\Expr\\MethodCall",
-    "PhpParser\\Node\\Expr\\New_",
-    "PhpParser\\Node\\Expr\\Throw_",
-    "PhpParser\\Node\\Expr\\Variable",
-    "PhpParser\\Node\\Identifier",
-    "PhpParser\\Node\\Name",
-    "PhpParser\\Node\\Scalar\\String_",
-    "PhpParser\\Node\\Stmt",
-    "PhpParser\\Node\\Stmt\\Catch_",
-    "PhpParser\\Node\\Stmt\\Class_",
-    "PhpParser\\Node\\Stmt\\ClassLike",
-    "PhpParser\\Node\\Stmt\\Declare_",
-    "PhpParser\\Node\\Stmt\\Enum_",
-    "PhpParser\\Node\\Stmt\\Interface_",
-    "PhpParser\\Node\\Stmt\\ClassMethod",
-    "PhpParser\\Node\\Stmt\\Trait_",
-    "PhpParser\\Node\\VariadicPlaceholder",
-    "PhpParser\\Comment\\Doc",
-    "PhpParser\\Node\\Expr\\Ternary",
-    "PhpParser\\Node\\NullableType",
-    "PhpParser\\Node\\Param",
     "PHPStan\\Analyser\\NodeCallbackInvoker",
     "PHPStan\\Analyser\\Scope",
     "PHPStan\\Node\\FileNode",