add php-parser

* [x] add gadget
* [x] ~~test: `@todo`~~ see #38
* [x] test: var_dump
* [x] test: die
* [x] ~~test: `// dont commit`~~ see #38 
* [x] test echo

more complex ideas

* [x] blacklist of functions that are not allowed (careful with language constructs vs. functions)
* [x] ~~blacklist of comments that trigger issues~~ see #38 
* [x] issue severity should be configurable per blacklist comment/function

Question: how to escalate on `goto` :smile: 
to summarize our discussion

* AbstractGadget takes the cake
* methods are only allowed in there, if >1 gadget uses them
* helper class with static method ist a hidden dependency we do not want, as are traits
* "injected services" could bloat our c'tor if we stick to single responsibility and end up having like 4 of 5 services

any additions?