Run the trusted-types file-cache check on phpize and Windows builds

The opcache.file_cache check added in ab78d7d spawns a child PHP, and
that child failed outside the Makefile build on Linux and macOS:

- phpize legs: the child loaded the extension from its Makefile location,
  turbo-ext/phpstan_turbo.so, which phpize builds never write. The step
  now passes TURBO_DLL like the smoke and arena steps next to it.
- Windows: sys_get_temp_dir() is an 8.3 path (C:\Users\RUNNER~1\...), and
  the CLI passes a -d value that starts with a letter into the ini
  unquoted, where ~ is an operator. The value is now quoted, and the child
  runs from an argument list, because escapeshellarg() on Windows replaces
  double quotes with spaces.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CmttmeH2WqiTdVc9HGHBNL

Author: ondrejmirtes

.github/workflows/phar.yml

@@ -316,6 +316,11 @@ jobs:
         run: php -d extension="$RUNNER_TEMP/turbo-ext/modules/phpstan_turbo.so" turbo-ext/tests/exit-immediately.php
 
       - name: "Trusted types (the optimizer pass drops type checks under the prefix only)"
+        # the opcache.file_cache child process locates the extension through
+        # TURBO_DLL — its default, turbo-ext/phpstan_turbo.so, only exists in
+        # Makefile builds
+        env:
+          TURBO_DLL: ${{ runner.temp }}/turbo-ext/modules/phpstan_turbo.so
         run: php -d extension="$RUNNER_TEMP/turbo-ext/modules/phpstan_turbo.so" -d opcache.enable_cli=1 turbo-ext/tests/trusted-types.php
 
       - name: "Signature parity (reflect native classes against the PHP twins)"

turbo-ext/tests/trusted-types.php

@@ -135,13 +135,25 @@ function check(string $label, array $expected, array $actual): bool
 $fileCacheDir = sys_get_temp_dir() . '/phpstan-trusted-types-file-cache-' . getmypid();
 @mkdir($fileCacheDir);
 $extension = getenv('TURBO_DLL') ?: dirname(__DIR__) . '/phpstan_turbo.so';
-$armedWithFileCache = exec(sprintf(
-	'%s -d extension=%s -d opcache.enable_cli=1 -d opcache.file_cache=%s -r %s',
-	escapeshellarg(PHP_BINARY),
-	escapeshellarg($extension),
-	escapeshellarg($fileCacheDir),
-	escapeshellarg('var_export(PHPStanTurbo\\Runtime::trustTypesUnder(' . var_export($trustedPrefix, true) . '));'),
-));
+// The file cache path is quoted for the ini parser: the CLI quotes a -d value
+// itself only when it does not start with a letter or digit, and on Windows
+// the temp dir is an 8.3 path whose ~ is an operator in unquoted ini syntax.
+// The quotes are why this is an argument list rather than a shell command:
+// escapeshellarg() on Windows replaces double quotes with spaces.
+$process = proc_open([
+	PHP_BINARY,
+	'-d', 'extension=' . $extension,
+	'-d', 'opcache.enable_cli=1',
+	'-d', 'opcache.file_cache="' . $fileCacheDir . '"',
+	'-r', 'var_export(PHPStanTurbo\\Runtime::trustTypesUnder(' . var_export($trustedPrefix, true) . '));',
+], [1 => ['pipe', 'w']], $pipes);
+if ($process === false) {
+	fwrite(STDERR, "proc_open failed\n");
+	exit(1);
+}
+$armedWithFileCache = trim(stream_get_contents($pipes[1]));
+fclose($pipes[1]);
+proc_close($process);
 if ($armedWithFileCache !== 'false') {
 	fwrite(STDERR, sprintf("FAIL: trustTypesUnder() must refuse with opcache.file_cache set, got %s\n", var_export($armedWithFileCache, true)));
 	$ok = false;