fix(store+ci+mcp): delete bespoke object.js, fix composer gate, extend AbstractToolHandler, initial-state, docusaurus bump

[rubenvdlinde]

Summary

• [HIGH] Bespoke object.js store contradicts createObjectStore pattern — propagates anti-pattern to all new apps #78 HIGH: Delete src/store/modules/object.js (bespoke Pinia store with ad-hoc URL assembly, no CSRF headers, no pagination). Replace with createObjectStore from @conduction/nextcloud-vue in store.js — the fleet-standard store that handles CSRF, pagination, and consistent error surfacing. Also fixes registry.js status-badge appliesTo.schema: 'item' → 'example' to align with the seed slug corrected in PR fix(scaffold): repair critical defaults — force:false, manifest alignment, nc-vue bump, repair-steps, seed RBAC #91.
• [HIGH] composer check:strict silently passes when quality tools fail — || echo swallows real errors #80 HIGH: Remove || echo 'X not installed, skipping...' from psalm, phpstan, and phpmd scripts in composer.json. These tools are all in require-dev (always installed after composer install), so the echo was silently swallowing real failures and letting check:strict show green with active errors.
• [MEDIUM] ExampleToolProvider does not extend AbstractToolHandler — ad-hoc auth check bypasses fleet standard #83 MEDIUM: Refactor ExampleToolProvider to extend AbstractToolHandler (fleet-standard pattern, openbuilt PR #173). Inherits requireWriteRole() and requireAdminUser() helpers instead of an ad-hoc inline auth check. Add tests/Stubs/Mcp/AbstractToolHandler.php for standalone CI. Update ExampleToolProviderTest to pass the new IGroupManager constructor parameter.
• [MEDIUM] Admin settings template uses data-version DOM attribute (initial-state anti-pattern) #85 MEDIUM: Replace data-version DOM attribute in templates/settings/admin.php with IInitialStateService::provideInitialState() — the NC-standard CSP-compliant initial-state API. Read in Vue via loadState('app-template', 'version').
• [MEDIUM] docs/package.json uses @conduction/docusaurus-preset ^3.4.0 — canonical is ^3.12.0 #86 MEDIUM: Bump @conduction/docusaurus-preset from ^3.4.0 to ^3.12.0 in docs/package.json — canonical fleet version auto-published from design-system main via semantic-release.

Test plan

• Run npm run check:specs — no regressions
• Run composer check:strict — psalm/phpstan/phpmd now propagate non-zero exit on failure
• Run ./vendor/bin/phpunit --colors=always — ExampleToolProviderTest passes with new IGroupManager mock
• Verify admin settings page loads (no data-version errors in console)
• Verify createObjectStore import resolves from @conduction/nextcloud-vue after npm install