ci: repair checks and publish documentation with template 2.1

.gitattributes

@@ -11,3 +11,4 @@
 /Dockerfile         export-ignore
 /infection.json5    export-ignore
 /phpunit.xml        export-ignore
+/composer-dependency-analyser.php export-ignore

.github/workflows/reports.yml

@@ -2,16 +2,16 @@ name: "Fast Forward Reports"
 
 on:
   push:
-    branches:
-      - main
+    branches: [main]
+  pull_request:
   workflow_dispatch:
 
+# Caller permissions cap the callee; only its isolated deploy job writes Pages.
 permissions:
-  contents: write
+  contents: read
   pages: write
   id-token: write
 
 jobs:
   reports:
-    uses: php-fast-forward/dev-tools/.github/workflows/reports.yml@main
-    secrets: inherit
+    uses: php-fast-forward/dev-tools/.github/workflows/reports-native.yml@main

.github/workflows/tests.yml

@@ -5,11 +5,12 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
-  pages: write
-  id-token: write
+  contents: read # Read source; matrix jobs retain read-only tokens.
+  actions: read # Allow the checkout-free publisher to inspect matrix job results.
+  statuses: write # Caller ceiling; only isolated callee publishers request this permission.
 
 jobs:
   tests:
     uses: php-fast-forward/dev-tools/.github/workflows/tests.yml@main
-    secrets: inherit
+    with:
+      publish-required-statuses: ${{ github.actor != 'dependabot[bot]' }}

composer-dependency-analyser.php

@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+use FastForward\DevTools\Config\ComposerDependencyAnalyserConfig;
+use ShipMonk\ComposerDependencyAnalyser\Config\Configuration;
+use ShipMonk\ComposerDependencyAnalyser\Config\ErrorType;
+
+return ComposerDependencyAnalyserConfig::configure(
+    static function (Configuration $configuration): void {
+        // This HTTP bundle deliberately provides these companion utilities to consumers.
+        // See docs/links/dependencies.rst; the provider itself does not call them.
+        $configuration->ignoreErrorsOnPackage('middlewares/utils', [ErrorType::UNUSED_DEPENDENCY]);
+    },
+);