Jishui: Dependency Hardening

Theme: HTTP Auth, WhatsApp Plumbing & Dependency Hardening. No framework API breaks, no new env vars, no migrations; PHP 8.3
floor preserved.

Added

• Http\Client now passes auth_basic through to Symfony HttpClient. Per-request HTTP Basic auth previously had no effect
  (transformOptions() dropped it); callers no longer need to hand-build an Authorization header.
• whatsapp is a supported SendNotification queue type — phone-messaging extensions registering a whatsapp channel can be
  delivered asynchronously through the framework's notification job.

Changed

• Intervention Image v4 (^4.1): ImageProcessor ported to the v4 API; public ImageProcessor/image() API unchanged.
• Refreshed in-range minors (flysystem, getid3, reflection-docblock); pinned symfony/event-dispatcher + symfony/string to
  ^7.4 to hold the PHP 8.3 floor.

Security

• Patched all known dependency advisories within ^7.4/^10.5 (Symfony 7.4.x incl. HIGH-severity mailer/mime injection CVEs;
  PHPUnit 10.5.63). composer audit is clean.

Upgrade: composer update. Only apps using intervention/image directly need to move to the v4
API.