[vitormattos]

Summary

• Limit Docker Dependabot PHP updates to patch releases within the PHP 8.2 and 8.3 lines.
• Remove the unsupported PHP 8.1 Dockerfile (historical copy remains in Git).
• Reject version drift in the Dockerfile build stage and in the image publishing workflow before building/publishing.
• Document the supported PHP version matrix.

Why

Dependabot PR #172 attempted to replace PHP 8.1, 8.2, and 8.3 base images with PHP 8.5 while the image publishing workflow continued to tag the resulting builds as PHP 8.2 and PHP 8.3. This risks publishing mislabeled runtime images.

Validation

• Verified the version guard locally against valid PHP 8.2 and 8.3 image references, cross-series PHP 8.5, unpinned references, and invalid digests.
• Verified all three commits are signed and DCO compliant through Git Signing MCP.
• Full Docker multi-architecture builds and worker integration tests are pending GitHub Actions.

Follow-up

After GitHub Actions passes and the fix is merged, confirm that Dependabot proposes only within-series PHP updates. This supersedes #172.

No automatic merge requested.