fix(ci): repair repo-health and code quality gate failures

- repo-health.yml: use .mokogitea/workflows/ instead of .gitea/workflows/
  (moko-platform uses the mokogitea convention)
- phpcs.xml/phpstan.neon: point to actual source dirs (lib/, validate/,
  automation/, cli/) instead of non-existent api/src and api/tests

Authored-by: Moko Consulting
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.mokogitea/workflows/repo-health.yml

@@ -49,7 +49,7 @@ env:
   SCRIPTS_ALLOWED_DIRS: scripts,scripts/fix,scripts/lib,scripts/release,scripts/run,scripts/validate
 
   # Repo health policy
-  REPO_REQUIRED_ARTIFACTS: README.md,LICENSE,CHANGELOG.md,CONTRIBUTING.md,CODE_OF_CONDUCT.md,.gitea/workflows/
+  REPO_REQUIRED_ARTIFACTS: README.md,LICENSE,CHANGELOG.md,CONTRIBUTING.md,CODE_OF_CONDUCT.md,.mokogitea/workflows/
   REPO_OPTIONAL_FILES: SECURITY.md,GOVERNANCE.md,.editorconfig,.gitattributes,.gitignore,README.md,docs/
   REPO_DISALLOWED_DIRS:
   REPO_DISALLOWED_FILES: TODO.md,todo.md
@@ -60,7 +60,7 @@ env:
   # File / directory variables
   DOCS_INDEX: docs/docs-index.md
   SCRIPT_DIR: scripts
-  WORKFLOWS_DIR: .gitea/workflows
+  WORKFLOWS_DIR: .mokogitea/workflows
   SHELLCHECK_PATTERN: '*.sh'
   SPDX_FILE_GLOBS: '*.sh,*.php,*.js,*.ts,*.css,*.xml,*.yml,*.yaml'
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

phpcs.xml

@@ -10,8 +10,10 @@ SPDX-License-Identifier: GPL-3.0-or-later
     <description>PHP_CodeSniffer configuration for MokoStandards projects</description>
 
     <!-- Files to check -->
-    <file>api/src</file>
-    <file>api/tests</file>
+    <file>lib</file>
+    <file>validate</file>
+    <file>automation</file>
+    <file>cli</file>
 
     <!-- Exclude vendor and other dependencies -->
     <exclude-pattern>*/vendor/*</exclude-pattern>

phpstan.neon

@@ -8,8 +8,10 @@
 parameters:
     level: 5
     paths:
-        - api/src
-        - api/tests
+        - lib
+        - validate
+        - automation
+        - cli
     excludePaths:
         - vendor
         - node_modules