Fix composer vendor build after #300 squash

The #300 squash kept both Composer file-inventory fixes: one before
the lock rewrite and one after the marker write. The second rebound
an already-moved value, so socket-patch-core failed to compile and
every Rust CI job went red.

Keep the pre-rewrite inventory. It runs after filter normalization,
and a failure there refuses before composer.lock is touched. The
marker lives in the uuid dir, outside the inventoried copy, so the
result is the same.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01F3KCWT9B1MUVPrgerxxGpK
Assisted-by: Claude Code:claude-opus-5-5

Author: claude

crates/socket-patch-core/src/vendor/composer_lock.rs

@@ -440,16 +440,7 @@ pub async fn vendor_composer<'a>(
     let marker = VendorMarker::new("composer", &base_purl, record, vendored_at);
     write_marker_or_warn(&uuid_dir, &marker, &mut warnings).await;
 
-    let file_inventory = match super::verify::compute_dir_inventory(&copy_dir).await {
-        Ok(inventory) => inventory,
-        Err(error) => {
-            let _ = remove_tree(&uuid_dir).await;
-            prune_empty_vendor_dirs(&copy_dir).await;
-            return refused("vendor_inventory_unavailable", error);
-        }
-    };
-
-    let mut entry = VendorEntry {
+    let entry = VendorEntry {
         ecosystem: "composer".to_string(),
         base_purl,
         uuid: record.uuid.clone(),
@@ -480,7 +471,6 @@ pub async fn vendor_composer<'a>(
         pdm: None,
         pipenv: None,
     };
-    entry.artifact.file_inventory = Some(file_inventory);
 
     done(result, Some(entry), warnings)
 }