chore: depend on released cache and mongo instead of patching vendor

The Dockerfile cloned utopia-php/monorepo and utopia-php/mongo at fixed
commits and copied their src/ over vendor/, driven by build args pinned in
the workflow:

    UTOPIA_CACHE_REFERENCE=d7c0806f...
    UTOPIA_MONGO_REFERENCE=daea8f82...

That was a vendor patch standing in for releases that did not exist yet.
Both now do, so the lock resolves them normally and the machinery goes.

    utopia-php/cache  4.0.1 -> 4.0.2  source 92e02dab6
    utopia-php/mongo         1.5.2    source 20f9a644a

Both lock references equal the Packagist source references exactly, and
each release contains the pinned commit: d7c0806f is an ancestor of the
cache/4.0.2 tag commit, and 1.5.2 contains daea8f82.

Constraints already admitted these (cache ^4.0.0, mongo 1.*), so only the
lock moved. Removing the build args also stops a Docker build fetching
arbitrary external git refs.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: abnegate

.github/workflows/tests.yml

@@ -25,9 +25,6 @@ jobs:
         uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3.3.1
         with:
           context: .
-          build-args: |
-            UTOPIA_CACHE_REFERENCE=d7c0806f9bbdafee794849398f65e8ece322711d
-            UTOPIA_MONGO_REFERENCE=daea8f8213c33f52e8b66d0f5366428bf2f5a4b8
           push: false
           tags: ${{ env.IMAGE }}
           load: true

Dockerfile

@@ -1,8 +1,5 @@
 FROM composer:2.8 AS composer
 
-ARG UTOPIA_CACHE_REFERENCE=''
-ARG UTOPIA_MONGO_REFERENCE=''
-
 WORKDIR /usr/local/src/
 
 COPY composer.lock /usr/local/src/
@@ -13,21 +10,7 @@ RUN composer install \
     --optimize-autoloader \
     --no-plugins \
     --no-scripts \
-    --prefer-dist \
- && if [ -n "$UTOPIA_CACHE_REFERENCE" ] || [ -n "$UTOPIA_MONGO_REFERENCE" ]; then \
-      test -n "$UTOPIA_CACHE_REFERENCE" \
-      && test -n "$UTOPIA_MONGO_REFERENCE" \
-      && git init /tmp/utopia-cache \
-      && git -C /tmp/utopia-cache remote add origin https://github.com/utopia-php/monorepo.git \
-      && git -C /tmp/utopia-cache fetch --depth 1 origin "$UTOPIA_CACHE_REFERENCE" \
-      && git -C /tmp/utopia-cache checkout --detach FETCH_HEAD \
-      && cp -R /tmp/utopia-cache/packages/cache/src/. vendor/utopia-php/cache/src/ \
-      && git init /tmp/utopia-mongo \
-      && git -C /tmp/utopia-mongo remote add origin https://github.com/utopia-php/mongo.git \
-      && git -C /tmp/utopia-mongo fetch --depth 1 origin "$UTOPIA_MONGO_REFERENCE" \
-      && git -C /tmp/utopia-mongo checkout --detach FETCH_HEAD \
-      && cp -R /tmp/utopia-mongo/src/. vendor/utopia-php/mongo/src/; \
-    fi
+    --prefer-dist
 
 FROM php:8.5.8-cli-alpine AS compile