fix: restore full release lint gate for booking transport release

[chubes4]

Problem

The authorized booking transport release from current main (6e6709e) is blocked by the configured Homeboy release lint gate.

Observed from homeboy release extrachill-api --apply on 2026-07-27:

• PHPCS reports legacy errors across route files, including short ternaries and non-Yoda comparisons.
• PHPStan level 7 reports 60 errors across 28 files.
• Booking transport-specific findings include public-write-admission.php, route-affinity.php, booking-attachment-download.php, and booking-inquiries.php.
• No release commit or tag was created.

Required outcome

• Make the configured full Homeboy release lint gate pass without suppressing real findings or weakening analysis.
• Preserve public API behavior and the merged booking transport contracts.
• Add or retain focused tests where a type correction changes control flow.
• Do not hand-edit version strings or changelog.
• Merge green before retrying the v0.27.0 release.

Production impact

The protected booking inquiry route is merged but absent from the deployed v0.26.1 package. Lo-Fi production rehearsal is blocked until this gate passes and API is released/deployed.

[chubes4]

Release retry from merged PR #141 remains blocked by two PHPStan level 7 errors:\n\n- inc/routes/auth/me.php:69: is_array() receives an already-narrowed array.\n- inc/routes/giveaway/giveaway.php:194: undefined DataMachine\\Engine\\Tasks\\TaskScheduler::schedule() call.\n\nPHPCS passed with 0 errors. Homeboy created no release commit, tag, or GitHub release. Fix these at the owning code paths and rerun the complete configured release gates; do not suppress findings or skip lint.