ci(security): add composer audit --locked after install

Author: HecFranco

.github/workflows/ci.yml

@@ -78,6 +78,9 @@ jobs:
           echo "📦 Installing dependencies for Symfony ${{ matrix.symfony }}..."
           composer require symfony/form:^${{ matrix.symfony }} symfony/framework-bundle:^${{ matrix.symfony }} symfony/twig-bundle:^${{ matrix.symfony }} --no-interaction --no-update
           composer update --with-all-dependencies --no-interaction --prefer-dist --no-progress
+      - name: Composer audit (Critical/High)
+        run: composer audit --locked
+
 
       - name: Run tests
         run: |