ver. 0.293: Code review fixes — 6 repositories, 16 fixes

- ArticleRepository: SQL injection fix (addslashes→parameterized), DRY refactor topArticles/newsListArticles
- AttributeRepository: dead class_exists('\S') blocking cache/temp clear
- CategoryRepository: dead class_exists('\S') blocking SEO link generation (critical)
- BannerRepository: parameterize $today in SQL + null guard on query()
- BasketCalculator: null guard checkProductQuantityInStock + optional DI params
- PromotionRepository: null guard on $basket (production fatal)
- OrderRepository/ShopBasketController/ajax.php: explicit DI in BasketCalculator callers

614 tests, 1821 assertions (+4 new)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

autoload/Domain/Promotion/PromotionRepository.php

@@ -453,6 +453,9 @@ class PromotionRepository
 
     public function findPromotion( $basket )
     {
+        if ( !is_array( $basket ) || empty( $basket ) )
+            return is_array( $basket ) ? $basket : [];
+
         foreach ( $basket as $key => $val )
         {
             unset( $basket[$key]['discount_type'] );