FTPI 1660: Setup Monitoring Service and Tests up to PHP 8.4

[Abraham-Flutterwave]

feat(monitoring): add monitoring service.

📋 Summary

Signoz Service Telemetry

🧪 Testing

• Event sent when /health/ready returns status: ok (probe carries x-api-key)
• Health result cached — two events produce one probe and two POSTs
• Event dropped and failure recorded when status is degraded
• Exactly 3 POST attempts on persistent 503, counted as one breaker failure
• No retry on non-503 errors (verified with 422)
• Circuit opens after 3 consecutive failures; subsequent sends make zero HTTP calls
• Successful send resets failure count and open-until timestamp
• Open circuit shared via PSR cache blocks all HTTP across workers
• app.created sequence updated: merchant lookup → health probe → event POST
• All static state reset in setUp/tearDown to prevent cross-test leakage

✅ Checklist

• Code follows the project coding style
• All exceptions swallowed in the telemetry path (never breaks payments)
• No secrets committed — API key remains the %%SIGNOZ_API_KEY%% build placeholder
• Unit tests added/updated and passing locally
• Backwards compatible — no public API or constructor signature changes
• Verified against staging SigNoz instance
• Changelog entry added

📦 Breaking changes

None. Constructor signature, public methods, and event payloads are unchanged.

---

Signed-off-by: Abraham Olaobaju abraham@flutterwavego.com

[wiz-f83cb90411]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	-
Sensitive Data	-
Secrets	-
IaC Misconfigurations	15  1  1
SAST Findings	-
Software Management Findings	-
Total	15  1  1

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.