- Vessel stage-3 carrier (tools/php2shell_vessel.py) with per-version
  stage3_pads; verified end-to-end on PHP 8.5.1-8.5.9 (uid=33 www-data).
- 21 verified rce:true profiles with matching offsets (exact image tag + sha256).
- Fix '+' decoding in the session-cookie path; extend build autodetection;
  tune retry/rotation and memory-limit sweeping.
- Add test_vessel.py / test_upstream_patch.py (58 tests pass).
- Update README status table and profile/offset inventories; scrub the
  personal path from the matrix report and emit relative profile paths.

Co-Authored-By: Claude Code <noreply@anthropic.com>

- pass --repo-dir through to php2shell_vessel.py
- honor --pad in the vessel calibrator and add regression tests
- make uncalibrated profile fields nullable and fix 8.3.33/8.2.34 metadata
- complete the catalog and record the independently re-verified builds

8.5.0-8.5.4, 8.5.6-8.5.8 and 8.5.10 were reproduced with uid=33(www-data) via the public mirror.gcr.io images after Docker Hub rate-limited the direct pulls. Remove the contributor-reported markers and update the evidence, matrix report and inventory.