feat: Use git submodule for private dependency

- Add wc-licensed-product-client as git submodule in lib/
- Change Composer repository from VCS to path type
- CI now checks out submodules recursively
- Remove COMPOSER_AUTH (no longer needed)

This solves the CI networking issue by fetching the
dependency via git submodule instead of Composer.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.gitea/workflows/release.yml

@@ -11,6 +11,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          submodules: recursive
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
@@ -30,8 +32,6 @@ jobs:
         run: composer validate --strict
 
       - name: Install Composer dependencies (production)
-        env:
-          COMPOSER_AUTH: '{"http-basic": {"src.bundespruefstelle.ch": {"username": "git", "password": "${{ secrets.SRC_GITEA_TOKEN }}"}}}'
         run: |
           composer config platform.php 8.3.0
           composer install --no-dev --optimize-autoloader --no-interaction

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "lib/wc-licensed-product-client"]
+	path = lib/wc-licensed-product-client
+	url = https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client.git

composer.json

@@ -16,8 +16,8 @@
     },
     "repositories": [
         {
-            "type": "vcs",
+            "type": "path",
-            "url": "https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client.git"
+            "url": "lib/wc-licensed-product-client"
         }
     ],
     "require": {

composer.lock

@@ -4,15 +4,15 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "f7faf49a10004a02b32814806bd51d77",
+    "content-hash": "0c8153ac31232ffe7f0af117cec865b4",
     "packages": [
         {
             "name": "magdev/wc-licensed-product-client",
             "version": "v0.2.2",
-            "source": {
+            "dist": {
-                "type": "git",
+                "type": "path",
-                "url": "https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client.git",
+                "url": "lib/wc-licensed-product-client",
-                "reference": "56abe8a97c72419c07a6daf263ba6f4a9b5fe4b1"
+                "reference": "f9281ec5fb23bf1993ab0240e0347c835009a10f"
             },
             "require": {
                 "php": "^8.3",
@@ -51,7 +51,9 @@
                 "issues": "https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client/issues",
                 "source": "https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client"
             },
-            "time": "2026-01-28T10:56:47+00:00"
+            "transport-options": {
+                "relative": true
+            }
         },
         {
             "name": "psr/cache",