Phase 3 sub-commit 3: examples/todo POC app, built via the makers

Standalone Composer/CMake project under examples/todo/ derived from the
skeleton, demonstrating every Phase 3 architectural primitive in a
non-trivial app. All cross-side wiring is maker-generated; no
handwritten bridge glue.

Generated and customised:

  - src/Entity/Todo.php — make:bridge:resource Todo (UUIDv7 id)
  - src/Controller/TodoController.php — make:bridge:resource Todo (CRUD)
  - src/Controller/MarkAllDoneController.php — make:bridge:command
    MarkAllDone, body filled in to flip done=true on every row
  - qml/TodoList.qml — make:bridge:resource Todo (starter ListView)
  - qml/TodoWindow.qml — make:bridge:window Todo, body customised to
    embed a read-only mirror of the same ReactiveListModel

The Phase 1 ping demo is dropped from this app — it doesn't fit the
todo flow and nothing in Main.qml references it.

Main.qml is the real list UI:

  - Add input + button (POST /api/todos with optimistic-friendly key).
  - Per-row CheckBox + delete button (PATCH/DELETE via
    todoModel.invoke() with `pending` role driving opacity).
  - "Mark all done" button (POST /api/mark-all-done).
  - "Open second window" button (Component { TodoWindow {} } pattern).

Build / run delegated to the same Makefile shape as the skeleton, with
SCRIPT_DIR/QT_BIN updated for the renamed binary (build/qml/todo).
composer.json's path repo points at ../../../framework/php (one level
deeper than the skeleton's path repo).

Verified end-to-end with offscreen QPA: POST/PATCH/DELETE on /api/todos
all round-trip, /api/mark-all-done flips every row, Mercure dual-
publishes on every change. Clean shutdown.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

examples/todo/Caddyfile

@@ -0,0 +1,36 @@
+# php-qml framework skeleton — FrankenPHP / Caddy / Mercure config (dev mode).
+#
+# Run from the skeleton/symfony/ directory so relative `php_server` paths
+# resolve correctly: cd framework/skeleton/symfony && frankenphp run --watch
+# --config ../Caddyfile.
+{
+	auto_https off
+	admin off
+	frankenphp
+	order php_server before respond
+	order mercure after encode
+}
+
+http://127.0.0.1:8765 {
+	root * public/
+	encode gzip
+
+	mercure {
+		transport local
+		# Must match MERCURE_JWT_SECRET in symfony/.env. lcobucci/jwt
+		# requires >= 256 bits, hence the long dev value.
+		publisher_jwt dev_php_qml_bridge_jwt_secret_at_least_256_bits_long_for_lcobucci
+		subscriber_jwt dev_php_qml_bridge_jwt_secret_at_least_256_bits_long_for_lcobucci
+		anonymous
+		publish_origins *
+		cors_origins *
+	}
+
+	php_server
+
+	log {
+		output stderr
+		format console
+	}
+}
+}