feat: bump appwrite/appwrite to 23.*

[premtsd-code]

Summary

Bumps `appwrite/appwrite` to `23.*` so consumers can use the typed `Backups` SDK service shipped in 20.2+.

PHPStan-level fixes:

• Drop `Runtime::DENO121/124/135` and `BuildRuntime::DENO121/124/135` (removed in SDK 23) from runtime mappings; `DENO140` onward retained
• `Functions::create` / `Sites::create`: `specification` → `buildSpecification` + `runtimeSpecification` (SDK 21 split)
• `importPasswordUser` return type: `?array` → `?\Appwrite\Models\User` (SDK 22 typed models)
• `API::getRow`: call `->toArray()` since SDK 22+ returns typed `Row`

Known follow-up

Many other call sites in `Sources/Appwrite.php` and `Destinations/Appwrite.php` still use array-offset access on responses (e.g. `$response['rows']`, `$user['$id']`). Those paths will fail at runtime under SDK 23 and need a separate refactor pass to use property access.

Test plan

• `composer lint` passes
• `composer check` (PHPStan level 3) passes
• `composer test` — non-infra tests pass (Supabase/NHost E2E require local Postgres)
• CI

[greptile-apps]

Greptile Summary

This PR bumps appwrite/appwrite from 19.* to 23.*, migrates array-offset access to typed property access across Sources and Destinations, and adds the variableId named argument to createVariable calls to support ID-preserving migration. The Reader/API adapter is fully updated to wrap SDK 23 typed objects via ->toArray().

• Destinations/Appwrite.php: drops removed Deno 1.21/1.24/1.35 runtimes, splits specification into buildSpecification/runtimeSpecification, and updates importPasswordUser return type to \\Appwrite\\Models\\User.
• Sources/Appwrite.php: broad migration from $response['key'] to $response->property; cursor-pagination now uses empty() guard for teams but retains unsafe $collection[count-1]->id before the empty-check for buckets and functions.
• Sources/Appwrite/Reader/API.php: listDatabases, listTables, listColumns, listIndexes, listRows, and getRow all correctly call ->toArray(), resolving the previous SDK 23 runtime breakage for the database reader path.

Confidence Score: 3/5

The SDK 23 migration is largely correct, but two cursor-pagination paths in Sources/Appwrite.php can throw a TypeError on an empty page response, silently aborting a migration mid-run.

The $lastBucket and $lastFunction cursor lines compute $collection[count($collection) - 1]->id before the empty-page guard runs. When the SDK returns zero items, count - 1 is -1, PHP returns null for the undefined offset, and null->id throws a TypeError that the trailing ?? null cannot catch. Both paths are exercised on every storage and function migration.

src/Migration/Sources/Appwrite.php — the bucket and function cursor-pagination loops need the empty-guard applied before the ->id dereference, as was done for the teams loop.

Important Files Changed

Filename	Overview
composer.json	Bumps appwrite/appwrite from 19.* to 23.*, updates PHP constraint to >=8.2, and removes the platform override that was pinning PHPStan to PHP 8.1.
src/Migration/Destinations/Appwrite.php	Migrates createVariable calls to SDK 23 named-argument form (adding variableId), splits specification into buildSpecification/runtimeSpecification, drops removed Deno runtimes, and updates importPasswordUser return type to typed User model.
src/Migration/Sources/Appwrite.php	Broad migration from array-offset access to typed property access throughout; two cursor-pagination patterns ($lastBucket, $lastFunction) still compute $collection[count-1]->id before the empty-check guard, making them crash on an empty page response.
src/Migration/Sources/Appwrite/Reader/API.php	All list methods now wrap SDK 23 typed objects in ->toArray() preserving the plain-array contract; getRow calls ->toArray() directly; $rowsResponse->total is accessed correctly without conversion.

_{Reviews (11): Last reviewed commit: "chore(deps): drop config.platform pin" | Re-trigger Greptile}