refactor: rename lib/ to core/ for clearer core-module separation

Rename the top-level lib/ directory to core/ so the project root
immediately communicates which code is core platform and which lives
in modules/. PHP namespaces (MintyPHP\*) are unchanged — only the
Composer PSR-4 path mapping moves from lib/ to core/.

Module-internal lib/ directories (modules/*/lib/) are untouched.

Updated across the full stack:
- composer.json PSR-4 mapping
- bootstrap entry points (web/index.php, bin/*, tests/bootstrap.php)
- tooling configs (phpstan.neon, phpunit.xml, php-cs-fixer)
- 26 architecture contract tests
- enforcement-policy, guard-catalog, quality-gates
- all documentation (CLAUDE.md, README, 25 docs/, .agents/skills/)
- bin/qa-extended.sh search paths
- .claude/settings.local.json permission paths

Workflow: .agents/runs/CORE-LIB-RENAME-001/ (Analyst → Planner →
Executor → Code Review (4 findings fixed) → Security Review →
Acceptance Test → Finalizer)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.agents/skills/core-guardrails/references/boundaries-core.md

@@ -2,8 +2,8 @@
 
 ## Schichtgrenzen
 
-1. MUST SQL nur in `lib/Repository/**` halten.
-2. MUST Business-Logik in `lib/Service/**` halten.
+1. MUST SQL nur in `core/Repository/**` halten.
+2. MUST Business-Logik in `core/Service/**` halten.
 3. MUST `pages/**` auf Input, Auth/AuthZ, Orchestrierung, Response begrenzen.
 4. MUST NOT Business- oder Permission-Logik in `templates/**` legen.
 
@@ -11,7 +11,7 @@
 
 1. MUST in Actions/Helpern/Templates nur `app(Foo::class)` verwenden.
 2. MUST NOT in `pages/**` direkt `new ...Service|Gateway|Repository` nutzen.
-3. MUST NOT in `lib/Service/**` (ausser `*Factory.php`) direkt `new ...Factory|Service|Gateway|Repository` nutzen.
+3. MUST NOT in `core/Service/**` (ausser `*Factory.php`) direkt `new ...Factory|Service|Gateway|Repository` nutzen.
 4. MUST NOT in `pages/admin/**` `Factory::class` referenzieren oder `app(...Factory::class)->create...` nutzen.
 
 ## Input / Validation

.agents/skills/core-guardrails/references/quality-gates.md

@@ -15,9 +15,9 @@ Policy-Hinweis:
 ## Struktur-Gates (schnell)
 
 ```bash
-(rg 'new\s+[^\s(]+Factory\(' lib/Service || true) | wc -l
-(rg --glob '!**/*Factory.php' 'new\s+[^\s(]+(Service|Gateway|Repository)\(' lib/Service || true) | wc -l
-(rg "\b(accessServicesFactory|directoryServicesFactory|userServicesFactory|authServicesFactory|tenantServicesFactory|settingServicesFactory|userRepositoryFactory|authRepositoryFactory|authGatewayFactory)\(" pages lib templates web || true) | wc -l
+(rg 'new\s+[^\s(]+Factory\(' core/Service || true) | wc -l
+(rg --glob '!**/*Factory.php' 'new\s+[^\s(]+(Service|Gateway|Repository)\(' core/Service || true) | wc -l
+(rg "\b(accessServicesFactory|directoryServicesFactory|userServicesFactory|authServicesFactory|tenantServicesFactory|settingServicesFactory|userRepositoryFactory|authRepositoryFactory|authGatewayFactory)\(" pages core templates web || true) | wc -l
 (rg -n 'new\s+[^\s(]+(Service|Gateway|Repository)\(' pages -g '*.php' || true) | wc -l
 (rg -n '\bDB::' pages -g '*.php' || true) | wc -l
 (rg -n 'app\([^\n]*Factory::class\)->create' pages/admin -g '*.php' || true) | wc -l

.agents/skills/core-guardrails/references/source-map.md

@@ -3,7 +3,7 @@
 ## Kernregeln
 
 - Architektur- und Schichtgrenzen: `/docs/explanation-architektur.md`
-- `lib/**`-Regeln und Instanziierung: `/docs/reference-lib-standards.md`
+- `core/**`-Regeln und Instanziierung: `/docs/reference-core-standards.md`
 - Kurzkonventionen: `/docs/reference-konventionen.md`
 - Request/Input/Validation: `/docs/howto-request-input-validation.md`