feat(posts): PHP2Shell — every PHP runtime I manage was vulnerable

Adds EN + ZH post php2shell-patching-every-php-runtime-i-manage: measured
PHP versions across the fleet, the order the fixes shipped in, the 8.5
package trap, the OLS vhost handler switch, and the silent bot-block bug
the sweep uncovered. Ships og cards (EN/ZH), banner + webp, 2 thumbs.

scripts/og-gen/art-meta.json

@@ -255,5 +255,8 @@
   "evidence": "URL percent-encoding trap killed · 2-layer defensive fix",
   "ogTitle_en": "Why Your TTS Model Keeps Saying \"Percent\"",
   "ogTitle_zh": "为什么本地语音合成一直在念 Percent？"
+ },
+ "php2shell-patching-every-php-runtime-i-manage": {
+  "evidence": "8 public sites in 2 min · 7 on 8.5.12 · 8 dead rules"
  }
 }