Cut duplicated and speculative code across the package

An over-engineering audit of the whole tree, applied in five reviewed
batches. Behaviour stays the same except where UPGRADE.md says otherwise.

PHP: the showcase and error-page stylesheets are prebuilt into
resources/dist by bin/stylesheets.mjs, through Vite's own postcss-import
(first occurrence kept, the order an application's build gives), instead
of Stylesheets::bundle() inlining imports on every request; only the
import walk DesignGuard needs stays. SchemeStylesheet::withProfiles()
replaces three copies of the scheme-plus-profiles loop, material:scheme
leaves spec and contrast checks to the node script that already made
them, and the error page's scheme cache, the hashed view namespace, the
translations path with no lang/ folder and DesignGuard's 1.x-name hints
are gone.

JS: the androidx shape port progress.js and both bin scripts each carried
lives once in resources/js/shapes.js (the generated SVGs are unchanged);
util.js holds ringIndex(), ms(), reopenGuard() and remember(), which
were written out several times; listeners are released through
AbortController; tooltip.js's hoverPopover() serves the rich tooltip too.

CSS: every rule for an element inside the navigation rail queries
`--md-navigation-rail-value` instead of repeating the seven collapsed
conditions under five media branches; badge, alert, progress, slider and
button read one non-inheriting colour-role table (components/color.css);
the dialog chrome, the submenu's popover chrome, the chip's state layer
and touch target, and the visually-hidden inputs use the shared rules
they copied; foundation/tokens.css is folded into foundation.css.

Views: Support\Field and Support\Link replace the error-key, bound-value
and link-attribute blocks copied into the fields and link components;
the timepicker period group, the menu filter and the showcase head are
partials; the datepicker's steppers and entry fields are loops; component
docblocks no longer restate SKILL.md.

Tests and tooling: one dataset-driven ComponentStylesheetsTest replaces
four per-group files, DesignGuardTest and the layout-component tests use
datasets, browser tests share one ready() helper, CSS parsing lives in
ComponentStylesheet alone. docs/audits and the finding IDs citing it are
removed, as are pestphp/pest-plugin-laravel, the unused composer scripts
and check:font; the lint job runs in the feature job, which now installs
node packages so the prebuilt-stylesheet staleness test runs in CI.

Feature suite 1177 passed, Chrome browser suite 299 passed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

bin/check-font.mjs

@@ -1,28 +1,18 @@
 /**
- * Checks that the packaged Google Sans Flex subset still carries the variable axes the CSS uses.
+ * Prints the variable axes of the packaged Google Sans Flex subset.
  *
- * Run from the repository root with `npm run check:font` (or `node bin/check-font.mjs [woff2]`).
- * tests/Feature/FontTest.php runs it through the configured `node` binary as well, because PHP
- * cannot open a woff2 without the Brotli extension.
- *
- *   wght  400–700 — every typescale weight (font.css `font-weight: 400 700`, type.css's regular,
- *                   medium and bold reference tokens).
- *   ROND  0–100   — the roundness axis every `type-emphasized-*` utility sets to 100. Re-subset
- *                   the font without it and the emphasized styles quietly stop being round.
+ * Run from the repository root with `node bin/check-font.mjs [woff2]`.
+ * tests/Feature/FontTest.php runs it through the configured `node` binary and asserts the ranges
+ * the CSS needs (wght, ROND — see that test for why), because PHP cannot open a woff2 without the
+ * Brotli extension.
  *
  * Output is one JSON object on stdout — {file, postscriptName, numGlyphs, axes: {tag: {name, min,
- * default, max}}} — and the exit status is 1, with the reason on stderr, when an axis is missing
- * or narrower than the range above.
+ * default, max}}}. The exit status is 1, with the reason on stderr, only when the file itself
+ * can't be opened.
  */
 import { openSync } from 'fontkit'
 import { fileURLToPath } from 'node:url'
 
-/** The axes the stylesheets depend on, and the range each one has to cover. */
-const REQUIRED = {
-    wght: { min: 400, max: 700 },
-    ROND: { min: 0, max: 100 },
-}
-
 const file = process.argv[2] ?? fileURLToPath(new URL('../resources/fonts/google-sans-flex/GoogleSansFlex-Latin.woff2', import.meta.url))
 
 let font
@@ -34,27 +24,9 @@ try {
     process.exit(1)
 }
 
-const axes = font.variationAxes ?? {}
-const problems = Object.entries(REQUIRED).flatMap(([tag, range]) => {
-    const axis = axes[tag]
-
-    if (!axis) {
-        return [`${tag} is missing; the subset has ${Object.keys(axes).join(', ') || 'no variable axes'}.`]
-    }
-
-    return axis.min > range.min || axis.max < range.max
-        ? [`${tag} covers ${axis.min}–${axis.max}, not the ${range.min}–${range.max} the stylesheets ask for.`]
-        : []
-})
-
 process.stdout.write(`${JSON.stringify({
     file,
     postscriptName: font.postscriptName,
     numGlyphs: font.numGlyphs,
-    axes,
+    axes: font.variationAxes ?? {},
 })}\n`)
-
-if (problems.length > 0) {
-    process.stderr.write(`${file}\n${problems.map((problem) => `  ${problem}`).join('\n')}\n`)
-    process.exit(1)
-}