mail() adds 'To' and 'Subject' itself from its first two arguments,
so they were removed before signing to avoid duplicate headers. That
also excluded them from the DKIM signature, which some validators
(e.g. Thunderbird) flag as unsafe. Now the full message is signed and
the two headers are stripped from the header block afterwards.

When a name in From/To/Cc contained characters outside RFC 2822 atext
(e.g. comma or quote in a UTF-8 name), it was base64-encoded as-is. After
the recipient decoded it, the raw special chars reappeared in the phrase
and could be misparsed (a comma would split one address into two).

Wrap such phrases in quoted-string before encoding, so the decoded form
is a valid quoted phrase. Applies only to the phrase part of address
headers, not to Content-Disposition filename values.

- use possessive quantifiers (++, *+) in T_String and T_Url patterns
to prevent PCRE JIT stack exhaustion on large data URIs (#104)
- exclude quotes from unquoted url() fallback pattern [^)]*? → [^)"']*?
so invalid quoted strings don't silently match as unquoted content
- added comprehensive tokenizer tests

In HTML attribute context (via ExpressionAttributeNode), `|json` routes to
HtmlHelpers::formatJsonAttribute() which uses the same JSON + smart-quoting
mechanism as formatDataAttribute(). Elsewhere it uses Helpers::encodeJson(),
refactored out of escapeJs() without the HtmlStringable unwrap branch.

(after 046594ff2)

proc_open with a string command goes through the shell, which splits
the path at spaces. Using an array bypasses the shell entirely,
which is also what the existing bypass_shell option was intended to do.

* opened 3.0-dev

* requires PHP 8.1

* uses PascalCase constants

* removed bridge for Latte

* Logger: added typehints

* Logger: md5 replaced with xxHash

* error.log changed to warning.log

* bar: errors panel => warnings

* readme: added link to Joomla integration (#583)

Link to Joomla! integration.

* used attribute Deprecated

* Update readme.md

Add link to Yii3 integration

---------

Co-authored-by: David Grudl <david@grudl.com>
Co-authored-by: n3t <n3t@n3t.cz>