PHP CVE patching demo

Patched: CVE-2024-4577,CVE-2024-11235,CVE-2025-1219,CVE-2019-11043,CVE-2012-1823

Version 0.1.0 · ring prod

• /health — version-verified health for Ring Promoter
• /api/hello — smoke JSON (PHP 8.3.19)
• /api/cves — decade CVE ledger + Dockerfile patch status
• /metrics — Prometheus gate metrics → Grafana

Base image patched via FROM php:8.3.19-cli-alpine + apk upgrade. See docs/CVE-DOCKER-PATCHING.md.

Promotions: int → test → acc → prod via Ring Promoter + GitHub Actions on k3s1.