Run PHPStan on PRs

Run phpstan in CI via the existing `npm run phpstan` command.

Include a flag that prevents the action reporting a fail when there are issues. There will be issues on every PR at first. I want a flag so that we can turn it on and off later. The flag should default to allowing it to pass regardless of the report.

Make it a workflow that can be manually triggered as well.