Fix DocBlockParamAllowDefaultValueSniff positional mismatch on partial @param lists

[dereuromark]

Summary

DocBlockParamAllowDefaultValueSniff matched docblock @param tags against the method signature by position (\$methodSignature[\$paramCount++]). When a docblock's @param list omitted intermediate parameters, positional indexing misaligned the comparison and the sniff produced false-positive "missing type" fixes.

Reproduction

/**
 * @param array<string, string> \$row
 * @param list<string> \$errors
 */
private function buildUnit(
    array \$row,
    int \$accountId,
    Property \$property,
    array &\$errors,
): EntityInterface {
}

• Docblock has 2 @param tags: \$row, \$errors.
• Signature has 4 params: \$row, \$accountId, \$property, \$errors.
• Iterating docblock tag \$errors (count=1) mapped to signature slot 1, which is int \$accountId.
• Sniff concluded \$errors was "missing type int" and rewrote list<string> \$errors → list<string>|int \$errors.
• DocBlockParamTypeMismatchSniff (which correctly matches by name) then removed the bogus |int.
• The two sniffs fought pass after pass until phpcbf bailed with FAILED TO FIX.

Fix

Build a \$signatureByName map keyed on the parameter variable name, parse each @param's \$valueNode first, then look up the matching signature entry by \$valueNode->parameterName. Partial or out-of-order docblocks now skip params they don't mention instead of misaligning them against the wrong signature slot.

Test

Added a regression fixture (partialDocBlock method in tests/_data/DocBlockParamAllowDefaultValue/before.php and after.php) that reproduces the infinite fixer loop on master and passes on this branch. Verified by stashing the sniff change and rerunning the test — it fails with the exact bad rewrite (list<string>|int \$errors).

Full suite (91 tests) still green.