Upgrade to Laravel 13

- laravel/framework ^12.0 -> ^13.0 (installed 13.19.0)
- laravel/tinker ^2.9 -> ^3.0 (installed 3.0.2, pulls psysh >=0.12.19)
- phpunit/phpunit ^11.0 -> ^12.0 (installed 12.5.31)
- Symfony components move to 8.x (supported by L13); symfony/yaml stays on
  patched 7.4.14 via its direct ^7.0 constraint
- league/commonmark auto-bumped to 2.8.2 (patched)
- No application/config code changes required; the fluent
  validateCsrfTokens(except: ...) config still resolves under L13

composer audit: No security vulnerability advisories found.
Full suite green: 59 tests, 128 assertions (1 skipped).

composer.json

@@ -14,8 +14,8 @@
         "enshrined/svg-sanitize": "^0.22.0",
         "graham-campbell/github": "^13.0",
         "guzzlehttp/guzzle": "^7.8",
-        "laravel/framework": "^12.0",
-        "laravel/tinker": "^2.9",
+        "laravel/framework": "^13.0",
+        "laravel/tinker": "^3.0",
         "laravel/ui": "^4.4",
         "league/flysystem-aws-s3-v3": "^3.0",
         "nunomaduro/collision": "^8.0",
@@ -27,7 +27,7 @@
         "barryvdh/laravel-ide-helper": "^3.0",
         "filp/whoops": "^2.8",
         "mockery/mockery": "^1.6",
-        "phpunit/phpunit": "^11.0",
+        "phpunit/phpunit": "^12.0",
         "squizlabs/php_codesniffer": "3.*",
         "symfony/thanks": "^1.2",
         "fakerphp/faker": "^1.23"