Adds the "key:convert:pkcs8" command, the counterpart of "key:convert:pkcs1",
for the projects that share keys with libraries only able to import PKCS#8
private keys, such as the npm "jose" package.

RSA keys already had a PKCS#8 representation through RSAKey::toPEM(). EC keys
gain ECKey::convertPrivateKeyToPKCS8PEM(), which wraps the RFC 5915 ECPrivateKey
into a PrivateKeyInfo structure and supports every curve of the framework, the
Brainpool ones included. OKP keys gain the OKPKey utility and, with it, their
first JWK to PEM conversion.

As PKCS#8 only covers private keys, public keys are converted into a
SubjectPublicKeyInfo structure.

Closes #661

Adds the "key:convert:pkcs8" command, the counterpart of "key:convert:pkcs1",
for the projects that share keys with libraries only able to import PKCS#8
private keys, such as the npm "jose" package.

RSA keys already had a PKCS#8 representation through RSAKey::toPEM(). EC keys
gain ECKey::convertPrivateKeyToPKCS8PEM(), which wraps the RFC 5915 ECPrivateKey
into a PrivateKeyInfo structure and supports every curve of the framework, the
Brainpool ones included. OKP keys gain the OKPKey utility and, with it, their
first JWK to PEM conversion.

As PKCS#8 only covers private keys, public keys are converted into a
SubjectPublicKeyInfo structure.

Closes #661

All three QA gates were red on this branch, two of them because a tool
config referenced a constant that upstream had removed, so the job died
before analysing anything.

• ECS imported SetList::PHPUNIT and SetList::STRICT, both gone from
  Easy Coding Standard. Dropped; STRICT's three fixers were already
  registered explicitly. OrderedImportsFixer was registered bare, which
  silently discarded the class, function, const order that CLEAN_CODE
  sets, so it is now configured explicitly. 35 files reformatted.
• Rector imported PHPUnitSetList::PHPUNIT_120, folded upstream into the
  version-aware sets. Dropped; withComposerBased(phpunit: true) was
  already selecting the right rules. The 89 files it then wanted to
  rewrite are applied here: PHPUnit 12 method renames, Symfony console
  attributes, and dead-code removal.
• PHPStan dropped the ergebnis/phpstan-rules and
  phpstan-beberlei-assert extensions, matching 4.2.x. ergebnis alone
  accounted for 777 of the 1694 baseline entries, which is to say the
  code never followed it.

The 34 errors PHPStan then reported are fixed rather than baselined,
mostly types tightened by brick/math and Symfony: non-empty-string for
BigInteger::fromBase, positive lengths for random_bytes and
randomBits, crit and key_ops validated as lists of strings.
Two Symfony denormalizer covariance errors remain baselined, as on 4.2.x.

JWKFactory::createOctKey() now rejects sizes below 8 bits, which only
turns an already-broken zero-length secret into an explicit error.

Test results are unchanged: the same 38 pre-existing failures, all in the
bundle configuration tests.

All three QA gates were red on this branch, two of them because a tool
config referenced a constant that upstream had removed, so the job died
before analysing anything.

• ECS imported SetList::PHPUNIT and SetList::STRICT, both gone from
  Easy Coding Standard. Dropped; STRICT's three fixers were already
  registered explicitly. OrderedImportsFixer was registered bare, which
  silently discarded the class, function, const order that CLEAN_CODE
  sets, so it is now configured explicitly. 35 files reformatted.
• Rector imported PHPUnitSetList::PHPUNIT_120, folded upstream into the
  version-aware sets. Dropped; withComposerBased(phpunit: true) was
  already selecting the right rules. The 89 files it then wanted to
  rewrite are applied here: PHPUnit 12 method renames, Symfony console
  attributes, and dead-code removal.
• PHPStan dropped the ergebnis/phpstan-rules and
  phpstan-beberlei-assert extensions, matching 4.2.x. ergebnis alone
  accounted for 777 of the 1694 baseline entries, which is to say the
  code never followed it.

The 34 errors PHPStan then reported are fixed rather than baselined,
mostly types tightened by brick/math and Symfony: non-empty-string for
BigInteger::fromBase, positive lengths for random_bytes and
randomBits, crit and key_ops validated as lists of strings.
Two Symfony denormalizer covariance errors remain baselined, as on 4.2.x.

JWKFactory::createOctKey() now rejects sizes below 8 bits, which only
turns an already-broken zero-length secret into an explicit error.

Test results are unchanged: the same 38 pre-existing failures, all in the
bundle configuration tests.

Merge branch '4.0.x' into 4.1.x

Add GitHub Action to auto-switch default branch on new tags

Add GitHub Action to auto-switch default branch on new tags

Add GitHub Action to auto-switch default branch on new tags

Add GitHub Action to auto-switch default branch on new tags

Add GitHub Action to auto-switch default branch on new tags

Conflicts:

phpstan-baseline.neon

Conflicts:

phpstan-baseline.neon

• 3.4.x:
  Update signature tests for the protected-header "alg" requirement (#651)
  Merge commit from fork
  Merge commit from fork
  Merge commit from fork
  Merge commit from fork
  Add sodium support for Base64 URL safe encoding/decoding (#644)
  Allow psr/cache v2 (#620)
  Fix call function on null (#596)
  Add RangeException to Base64UrlSafe (#577)
  Add Base64UrlSafe utility and refactor code references (#576)

Conflicts:

composer.json

phpstan-baseline.neon

src/Bundle/DataCollector/JWECollector.php

src/Experimental/KeyEncryption/AESCTR.php

src/Experimental/KeyEncryption/Chacha20Poly1305.php

src/Experimental/Signature/Blake2b.php

src/Library/Console/GeneratorCommand.php

src/Library/Core/JWK.php

src/Library/Core/Util/Base64UrlSafe.php

src/Library/Encryption/Algorithm/ContentEncryption/AESCBCHS.php

src/Library/Encryption/Algorithm/ContentEncryption/AESGCM.php

src/Library/Encryption/Algorithm/KeyEncryption/AESGCMKW.php

src/Library/Encryption/Algorithm/KeyEncryption/AESKW.php

src/Library/Encryption/Algorithm/KeyEncryption/AbstractECDH.php

src/Library/Encryption/Algorithm/KeyEncryption/Dir.php

src/Library/Encryption/Algorithm/KeyEncryption/PBES2AESKW.php

src/Library/Encryption/Algorithm/KeyEncryption/RSA15.php

src/Library/Encryption/Algorithm/KeyEncryption/Util/ConcatKDF.php

src/Library/Encryption/Algorithm/KeyEncryption/Util/RSACrypt.php

src/Library/Encryption/Serializer/CompactSerializer.php

src/Library/Encryption/Serializer/JSONFlattenedSerializer.php

src/Library/Encryption/Serializer/JSONGeneralSerializer.php

src/Library/KeyManagement/Analyzer/ESKeyAnalyzer.php

src/Library/KeyManagement/Analyzer/HSKeyAnalyzer.php

src/Library/KeyManagement/Analyzer/OctAnalyzer.php

src/Library/KeyManagement/Analyzer/RsaAnalyzer.php

src/Library/KeyManagement/Analyzer/ZxcvbnKeyAnalyzer.php

src/Library/Signature/Algorithm/EdDSA.php

src/Library/Signature/Algorithm/HMAC.php

src/Library/Signature/Serializer/CompactSerializer.php

src/Library/Signature/Serializer/JSONFlattenedSerializer.php

src/Library/Signature/Serializer/JSONGeneralSerializer.php

src/Library/composer.json

tests/Bundle/JoseFramework/Functional/Encryption/JWECollectorTest.php

tests/Bundle/JoseFramework/Functional/KeyManagement/JWKLoaderTest.php

tests/Component/Encryption/RFC7520/A128KWAndA128GCMEncryptionWithCompressionTest.php

tests/Component/KeyManagement/JWKFactoryTest.php

Fix key derivation by removing curve size parameter from openssl_pkey…