Reimplement ReplaceArgumentDefaultValueRector usages as dedicated rules

[TomasVotruba]

Replaces the configurable core ReplaceArgumentDefaultValueRector (likely to be deprecated) with standalone, self version-bonded Symfony rules. Each rule declares its own composer package constraint via ComposerPackageConstraintInterface and carries its own matching logic, so rector-symfony no longer depends on the core Rector\Arguments namespace for these transforms.

New rules:

• UrlGeneratorReferenceTypeRector - symfony/routing >=2.8; UrlGeneratorInterface::generate() reference type magic values to constants
• YamlFlagsToConstantRector - symfony/yaml >=3.1; Yaml::parse() / Yaml::dump() boolean flag args to Yaml flag constants (incl. array collapse)
• CookieSameSiteConstantRector - symfony/http-foundation >=4.2; Cookie __construct/create/withSameSite same-site strings to SAMESITE_* constants
• CookieConstructorDefaultsRector - symfony/http-foundation >=4.2; Cookie constructor 4.2 default changes ($secure false to null, $sameSite null to lax)

The five ruleWithConfigurationComposerVersionBound(ReplaceArgumentDefaultValueRector::class, ...) blocks in composer-based.php are removed and replaced by registering the dedicated rules.

Note: the three same-site transforms were previously spread across >=3.2, >=4.2 and >=5.1; they are consolidated into one rule bonded at >=4.2, the lowest version where all SAMESITE_* constants exist.

symfony/yaml and symfony/http-foundation added to require-dev so the bonded tests resolve deterministically.

All added rules covered by tests; ECS, PHPStan, class-leak, duplicated-code and the full suite pass locally.