feat: FrankenPHP runtime for Laravel and Symfony sites

[geodro]

Summary

Adds an opt-in FrankenPHP runtime as an alternative to the shared PHP-FPM container. Sites declare runtime: frankenphp (optionally runtime_worker: true) in .lerd.yaml, or switch at runtime with lerd runtime frankenphp [--worker]. Each FrankenPHP site spins up its own dunglas/frankenphp:php<version>-alpine container; nginx reverse-proxies to it on port 8000 and workers podman exec into it.

What's in

• Site.Runtime / .lerd.yaml runtime: schema plus lerd runtime CLI that writes both fields and cleans them up on switch to fpm.
• Framework.FrankenPHP adapter hook with Entrypoint, WorkerEntrypoint, Env, WorkerEnv, SupportsWorker. Built-in Laravel and Symfony adapters:
  • Laravel non-worker uses frankenphp php-server -r public/ for fresh-per-request dev ergonomics (code edits take effect immediately).
  • Laravel worker runs octane:start --server=frankenphp --workers=auto, with pcntl installed at container boot via the image's bundled install-php-extensions helper.
  • Symfony non-worker uses frankenphp php-server -r public/.
  • Symfony worker uses frankenphp php-server --worker=public/index.php --watch so file edits hot-reload without lerd restart.
  • Unknown frameworks fall back to frankenphp php-server rooted at the framework's public dir. mergeBuiltinFrankenPHP backfills the hook onto store framework defs that predate this feature.
• Built-in Symfony framework detection (composer.json symfony/runtime, symfony/framework-bundle, or symfony.lock).
• Per-site quadlet writer with restart-on-change so lerd isolate 8.3 and the dashboard's PHP picker actually pick up the new image tag.
• Nginx FrankenPHP vhost reuses the custom-container template. secure, unsecure, pause/unpause, restart, unlink, and lerd start all handle the FrankenPHP branch.
• Worker exec target branches three ways (FPM / custom container / FrankenPHP). SuccessExitStatus=1 130 143 on generated worker units so Symfony messenger:consume and similar workers stop cleanly without spurious Failed journal entries.
• Web UI: orange FrankenPHP badge (with worker suffix in worker mode) next to the existing service badges; Xdebug toggle is hidden on FrankenPHP sites since shared FPM Xdebug state doesn't apply. API exposes runtime and runtime_worker on /api/sites. PHP version picker now routes FrankenPHP sites through the FrankenPHP link path instead of regenerating a broken FPM vhost.
• TUI: runtime: frankenphp (worker) on the site detail info line.
• site_runtime MCP tool plus updated SKILL / cursor / junie guidelines.
• lerd init offers a FrankenPHP prompt when it detects signals (laravel/octane with OCTANE_SERVER=frankenphp, runtime/frankenphp, runtime/frankenphp-symfony, or a Containerfile.lerd FROM dunglas/frankenphp). lerd doctor surfaces the same hint on registered sites still on FPM.
• docs/features/frankenphp.md covers runtime switching, worker vs non-worker tradeoffs, hot reload caveats per framework, and current limitations.

Tested

Scaffolded Laravel 12 + Octane and Symfony 7.4 + Messenger projects at ~/Code/lerd-fp-tests/{laravel-fp,symfony-fp}. Verified per request serving, worker-mode resident PHP, queue/messenger workers executing via podman exec into the FrankenPHP container, lerd runtime round-trips cleanly removing .lerd.yaml runtime fields, and hot reload works in non-worker mode for both frameworks plus Symfony worker mode.

Out of scope (follow-ups)

• Xdebug support for FrankenPHP containers.
• Custom extension install (lerd php:ext add) on FrankenPHP sites.
• Laravel Octane --watch hot reload (needs chokidar-cli, ~150MB boot overhead). Workaround: non-worker mode for dev iteration, or php artisan octane:reload for quick worker refresh.