[hexmode]

Description

Adds state_management/php/sdk and state_management/php/http, mirroring the Python quickstart. A single order-processor PHP CLI app loops over orders, saving / getting / deleting each in the shared Redis statestore.

• sdk — DaprClient::saveState(), getState(), deleteState()
• http — raw POST/GET/DELETE /v1.0/state/statestore via curl (no SDK)

Both reuse the existing state_management/resources/ components, ship the standard dapr.yaml multi-app template, boilerplate makefile, and mechanical-markdown STEP blocks with deterministic output (Saving Order: {"orderId":"1"}, etc.). Apps are PHP CLI scripts (#!/usr/bin/env php), consistent with the pub/sub PHP quickstarts.

Dependencies / merge order

Stacked on #1342 (PHP CI wiring + pub_sub). Depends on the SDK fix dapr/php-sdk#154 (deleteState() currently fatals in published dev-main — see dapr/php-sdk#153).

Because published dev-main still has that bug, no composer.lock is committed for the sdk variant yet and its CI validation will fail until php-sdk#154 merges. Follow-up once it lands:

cd state_management/php/sdk
composer update dapr/php-sdk   # re-resolve dev-main with the fix
make validate                  # expect MAKE_EXIT=0
git add composer.lock && git commit -s -m "Add composer.lock for state management php sdk quickstart"
git push origin php-state-quickstart

The http variant has no third-party dependencies; its lock is committed and it validates as-is.

Issue reference

Fixes #1345

Checklist

• The quickstart code compiles correctly
• You've tested new builds of the quickstart if you changed quickstart code
• You've updated the quickstart's README if necessary
• Automated validation updated accordingly (STEP blocks mirror state_management/python/sdk)

Validation evidence: both variants pass make validate locally (Dapr 1.18.4 + state.redis). The sdk variant was validated against dapr/php-sdk@fix-delete-state-etag via a temporary composer path repository; MAKE_EXIT=0, all expected stdout lines matched, external links 200.