feat: populate firewall attributes and expose matched rules via verify

[eldadfux]

Summary

Keeps evaluation centered on the existing Firewall::verify() API:

1. Populate request values with setAttribute() / setAttributes()
2. Register ordered Rule objects
3. Call verify()
4. Read getLastMatchedRule() for the matched rule and action metadata

Attribute alias resolution stays inside Firewall (requestPath → path, etc.). No condition-name rewriting. No parallel match()/matches() helpers.

Test plan

• PHPUnit
• Pint / PSR-12
• PHPStan

[greptile-apps]

Greptile Summary

This PR keeps rule evaluation centered on Firewall::verify() and exposes matched-rule metadata.

• Documents verify() matched-rule behavior and return values.
• Adds optional IDs to Rule objects.
• Adds tests for populated request attributes, matched rules, and rule IDs.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed code.

Important Files Changed

Filename	Overview
src/Firewall.php	Updates the verify() documentation to describe matched-rule state and allow/block return behavior.
src/Rule.php	Adds optional rule ID metadata through setId() and getId().
tests/FirewallTest.php	Adds tests for attribute-based verification, matched-rule clearing, and reading rule IDs from the matched rule.

_{Reviews (6): Last reviewed commit: "feat: allow rules to carry an optional i..." | Re-trigger Greptile}