QSA can set phpcs.standard; fix package visibility in various places
document QSA: phpcs.standard