CI: fix Bref PHP detection (no which) and generic-linux libclang-15 path

Reproduced both remaining release failures locally against the actual Bref
image and an offline build:

- Bref (all 4): ext-php-rs finds PHP by shelling out to `which`, which the
  minimal Amazon Linux 2023 image does not ship — so detection failed even
  though /opt/bin/php is on PATH. Export PHP=/opt/bin/php and
  PHP_CONFIG=/opt/bin/php-config to bypass the `which` lookup (verified: the
  build then proceeds past PHP detection).

- Linux x86_64: the hardcoded LIBCLANG_PATH=/usr/lib/llvm-15/lib did not
  resolve to libclang-15, so bindgen silently fell back to the runner's
  libclang-14 and re-hit the emmintrin SSE2 bug. Locate the real libclang-15
  shared object by version and point LIBCLANG_PATH at its directory, failing
  loudly if it is missing.

Mirror the Bref PHP env in docs/install.md's from-source snippet.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01R3vgA3Q6PR9VQn8X5pLcMR

Author: claude

.github/workflows/release.yml

@@ -46,9 +46,15 @@ jobs:
       # whose emmintrin.h trips a bindgen SSE2 intrinsics bug when parsing the
       # PHP headers on x86_64. clang 15+ fixes it; aarch64 never hits it.
       - run: sudo apt-get update && sudo apt-get install -y clang-15 libclang-15-dev
-      - run: cargo build --release
-        env:
-          LIBCLANG_PATH: /usr/lib/llvm-15/lib
+      - name: Build
+        run: |
+          # Point bindgen at libclang-15 specifically (the runner also ships
+          # libclang-14; a wrong/empty LIBCLANG_PATH silently falls back to it
+          # and re-triggers the emmintrin bug). Locate the real .so by version.
+          dir="$(dirname "$(find /usr/lib /usr/lib64 -name 'libclang-15.so*' -print -quit 2>/dev/null)")"
+          [ -n "$dir" ] && [ "$dir" != "." ] || { echo "::error::libclang-15 not found"; exit 1; }
+          echo "Using LIBCLANG_PATH=$dir"
+          LIBCLANG_PATH="$dir" cargo build --release
       - name: Stage artifact
         run: |
           mkdir -p dist
@@ -99,6 +105,10 @@ jobs:
               export PATH="$HOME/.cargo/bin:/opt/bin:$PATH"
               export CARGO_TARGET_DIR=/tmp/target
               export LIBCLANG_PATH=/usr/lib64
+              # ext-php-rs locates PHP by shelling out to `which`, which the
+              # minimal AL2023 image does not ship; point it at Bref'\''s PHP
+              # directly so detection does not depend on `which`.
+              export PHP=/opt/bin/php PHP_CONFIG=/opt/bin/php-config
               cd /src
               cargo build --release          # rust-toolchain.toml pins the version
               mkdir -p dist

docs/install.md

@@ -104,6 +104,8 @@ docker run --rm --security-opt seccomp=unconfined \
   curl --proto "=https" -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain none
   export PATH="$HOME/.cargo/bin:/opt/bin:$PATH" CARGO_TARGET_DIR=/tmp/target
   export LIBCLANG_PATH=/usr/lib64
+  # The minimal image has no `which`; point ext-php-rs at PHP directly.
+  export PHP=/opt/bin/php PHP_CONFIG=/opt/bin/php-config
   cd /src && cargo build --release
   cp /tmp/target/release/libphp_quickjs.so /src/quickjs.so
 '