chore: upgrade contributte/qa to 0.4

[dakorpar]

Bumps contributte/qa from ^v0.3 to ^v0.4 (v0.3.2 => v0.4.0).

Transitive updates pulled in:

• squizlabs/php_codesniffer 3.13.5 => 3.13.6
• phpstan/phpdoc-parser 2.3.2 => 2.3.3

Ruleset fix

The newer PHPCS warns on our own ruleset.xml:

Passing an array of values to a property using a comma-separated string was deprecated in PHP_CodeSniffer 3.3.0. Support will be removed in PHPCS 4.0.0. The deprecated syntax was used for property rootNamespaces for sniff SlevomatCodingStandard.Files.TypeNameMatchesFileName.

Rewritten using <element key="..." value="..."/> nodes. The sniff still applies to src/ and tests/ as before, and the warning is gone.

Notes

No source changes were needed — the v0.4 ruleset flags nothing in src/ or tests/.

v0.5 exists only as 0.5.x-dev, so ^v0.4 is the current stable ceiling.

Verification

Run locally on PHP 8.3.31:

• make phpstan — no errors (level 7, src/)
• make cs — 64/64 files, no warnings
• make tests — 148 tests, 225 assertions, all passing

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.94%. Comparing base (cc8de36) to head (aa291dc).

Additional details and impacted files

@@            Coverage Diff            @@
##             master     #126   +/-   ##
=========================================
  Coverage     96.94%   96.94%           
  Complexity      308      308           
=========================================
  Files            25       25           
  Lines           983      983           
=========================================
  Hits            953      953           
  Misses           30       30           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.