[SDD-Dep] Audit CI for unwrapped composer calls - adapt #249 retry pattern (no-flakes rollout)

[satwareAG-ironMike]

Summary

[From amicron-platform #313 / #285 (no-flakes rollout) - cross-repo follow-up, IPADP.]

amicron-platform adopted a composer retry wrapper (#249: 3 attempts + exponential backoff against transient upstream failures - codeberg 504 / codeload 429) in !320. This repo runs GitHub Actions; the pattern needs adapting if composer is called in CI.

Task

• Audit .github/workflows/*.yml for composer install|update|require steps
• If found: adapt the retry pattern for Actions (either bash wrapper script checked into the repo, or a retry action with equivalent semantics - 3 attempts, exponential backoff)
• Document the audit result here either way (clean = close with evidence)

Reference implementation

docker/ci/composer-install-retry.sh in amicron-platform (self-contained bash, wraps composer <args>).

References

• Upstream tracking: amicron-platform ci: add firebird25 Docker service (FB 2.5 for backward-compat tests) #313 (parent), fix: pin Docker base images to SHA digests, remove PHP 8.1 and RC (#237) #285 (policy), test: add OOP-aware helper functions to tests/common.inc #249 (retry wrapper)