refactor(sdk): OOP modernization — AbstractClient, HttpTransport, SessionCapable trait

[KaiSchwarz-cnic]

Jira: RSRMID-2790

Summary

A series of OOP modernization commits that restructure the client hierarchy, extract shared transport logic, fix an LSP violation in IBS\\SessionClient, and clean up several smaller code-quality issues.

Architecture changes

• AbstractClient introduced (CNIC namespace): consolidates all registrar-agnostic logic (config loading, cURL transport setup, credentials, OTE/LIVE switching, IDN conversion, debug mode, proxy/referer, user agent, settings/isOTE accessors). Three abstract methods define the contract every concrete client must satisfy: request(), newSocketConfig(), setDefaultLogger().
• HttpTransport introduced (CNIC namespace): owns the cURL handle lifecycle and exposes a single post() method. The $chandle property has been removed from the client layer entirely; close() now delegates to the transport. Class is final (not public API, not extended).
• CNR\\Client now extends AbstractClient and retains only CNR-specific logic: request() with CNR command formatting, requestNextResponsePage(), and requestAllResponsePages().
• IBS\\Client now extends AbstractClient directly instead of CNR\\Client, correctly reflecting that IBS shares the common foundation but not the CNR-specific layer.

Session handling

• SessionCapable trait extracted into CNIC\\CNR: holds the real session implementations (login, logout, saveSession, reuseSession).
• CNR\\SessionClient uses the trait.
• IBS\\SessionClient no longer carries misleading stubs that unconditionally threw "Method not supported" — it simply does not include the trait.
• MONIKER\\SessionClient is unaffected (also does not support sessions).

⚠️ Breaking change: callers that caught \\Exception("Method not supported") from IBS\\SessionClient session methods will now receive a fatal Error ("Call to undefined method"). Guard with instanceof CNR\\SessionClient before calling session methods when supporting multiple registrar types.

Smaller improvements

• $settings and $isOTE made protected with public getSettings(): array and isOTE(): bool accessors (previously public, allowing unintended external mutation).
• ClientFactory::getClient() $logger parameter widened from ?CNR\\Logger to ?LoggerInterface so any logger implementation can be passed without a TypeError.
• Dead IBS\\Client::getPOSTData() override removed — AbstractClient already delegates to $this->socketConfig->getPOSTData() via polymorphism; the override was byte-for-byte identical to the base.
• SessionCapable::saveSession() and reuseSession() given : static return type declarations to satisfy the fluent contract.
• curl_close() calls removed — deprecated since PHP 8.5; CurlHandle is freed automatically by the GC.
• Registrar enum introduced in ClientFactory; switch replaced with match.
• Column and Record value objects updated to constructor promotion + readonly.
• $logger Psalm PropertyNotSetInConstructor suppression added (always set via abstract setDefaultLogger() in AbstractClient::__construct() — Psalm cannot trace through abstract method dispatch).

Release automation

• .releaserc.json updated: the semantic-release-replace-plugin file target and the @semantic-release/git assets were changed from src/CNR/Client.php to src/AbstractClient.php, where getVersion() now lives after the refactor.