refactor: rename lib/ to core/ for clearer core-module separation

Rename the top-level lib/ directory to core/ so the project root
immediately communicates which code is core platform and which lives
in modules/. PHP namespaces (MintyPHP\*) are unchanged — only the
Composer PSR-4 path mapping moves from lib/ to core/.

Module-internal lib/ directories (modules/*/lib/) are untouched.

Updated across the full stack:
- composer.json PSR-4 mapping
- bootstrap entry points (web/index.php, bin/*, tests/bootstrap.php)
- tooling configs (phpstan.neon, phpunit.xml, php-cs-fixer)
- 26 architecture contract tests
- enforcement-policy, guard-catalog, quality-gates
- all documentation (CLAUDE.md, README, 25 docs/, .agents/skills/)
- bin/qa-extended.sh search paths
- .claude/settings.local.json permission paths

Workflow: .agents/runs/CORE-LIB-RENAME-001/ (Analyst → Planner →
Executor → Code Review (4 findings fixed) → Security Review →
Acceptance Test → Finalizer)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

core/Service/Access/AccessServicesFactory.php

@@ -0,0 +1,95 @@
+<?php
+
+namespace MintyPHP\Service\Access;
+
+use MintyPHP\Repository\Access\PermissionRepositoryInterface;
+use MintyPHP\Repository\Access\RoleAssignableRoleRepositoryInterface;
+use MintyPHP\Repository\Access\RolePermissionRepositoryInterface;
+use MintyPHP\Repository\Access\UserRoleRepositoryInterface;
+
+class AccessServicesFactory
+{
+    private ?AccessPolicyFactory $accessPolicyFactory = null;
+    private \Closure $accessPolicyFactoryResolver;
+
+    public function __construct(
+        private readonly AccessRepositoryFactory $accessRepositoryFactory,
+        private readonly AccessGatewayFactory $accessGatewayFactory,
+        callable $accessPolicyFactoryResolver
+    ) {
+        $this->accessPolicyFactoryResolver = \Closure::fromCallable($accessPolicyFactoryResolver);
+    }
+
+    public function createPermissionRepository(): PermissionRepositoryInterface
+    {
+        return $this->accessRepositoryFactory->createPermissionRepository();
+    }
+
+    public function createRolePermissionRepository(): RolePermissionRepositoryInterface
+    {
+        return $this->accessRepositoryFactory->createRolePermissionRepository();
+    }
+
+    public function createUserRoleRepository(): UserRoleRepositoryInterface
+    {
+        return $this->accessRepositoryFactory->createUserRoleRepository();
+    }
+
+    public function createRoleAssignableRoleRepository(): RoleAssignableRoleRepositoryInterface
+    {
+        return $this->accessRepositoryFactory->createRoleAssignableRoleRepository();
+    }
+
+    public function createPermissionService(): PermissionService
+    {
+        return $this->accessGatewayFactory->createPermissionService();
+    }
+
+    public function createUserAuthorizationPolicy(): UserAuthorizationPolicy
+    {
+        return $this->accessPolicyFactory()->createUserAuthorizationPolicy();
+    }
+
+    public function createRoleAuthorizationPolicy(): RoleAuthorizationPolicy
+    {
+        return $this->accessPolicyFactory()->createRoleAuthorizationPolicy();
+    }
+
+    public function createPermissionAuthorizationPolicy(): PermissionAuthorizationPolicy
+    {
+        return $this->accessPolicyFactory()->createPermissionAuthorizationPolicy();
+    }
+
+    public function createSettingsAuthorizationPolicy(): SettingsAuthorizationPolicy
+    {
+        return $this->accessPolicyFactory()->createSettingsAuthorizationPolicy();
+    }
+
+    public function createTenantAuthorizationPolicy(): TenantAuthorizationPolicy
+    {
+        return $this->accessPolicyFactory()->createTenantAuthorizationPolicy();
+    }
+
+    public function createDepartmentAuthorizationPolicy(): DepartmentAuthorizationPolicy
+    {
+        return $this->accessPolicyFactory()->createDepartmentAuthorizationPolicy();
+    }
+
+    public function createAuthorizationService(): AuthorizationService
+    {
+        return $this->accessPolicyFactory()->createAuthorizationService();
+    }
+
+    private function accessPolicyFactory(): AccessPolicyFactory
+    {
+        if ($this->accessPolicyFactory !== null) {
+            return $this->accessPolicyFactory;
+        }
+
+        $factory = ($this->accessPolicyFactoryResolver)();
+        if (!$factory instanceof AccessPolicyFactory) {
+            throw new \RuntimeException('Access policy resolver must return AccessPolicyFactory');
+        }
+        return $this->accessPolicyFactory = $factory;
+    }
+}