feat: #3622286 Release Varbase Project 11.0.8

Release commit for Varbase Project 11.0.8, on the plan issue #3622286.

What this changes

• composer.json: version 11.0.x-dev to 11.0.8, and vardot/varbase + vardot/varbase-patches back to the released ~11.0.0 constraints.
• composer.lock and patches.lock.json regenerated in DDEV against that final composer.json and committed, so the tag installs from lock with no solve.
• README.md: version badge to 11.0.8.
• CHANGELOG.md: 11.0.8 section.

Dependency moves since 11.0.7

Package	11.0.7	11.0.8
drupal/varbase_starter	1.0.1	1.0.2
drupal/varbase_admin_base	1.0.1	1.0.2
vardot/varbase-patches	11.0.42	11.0.43
drupal/canvas	1.10.1	1.11.0
drush/drush	13.7.7	13.8.0
drupal/ai_integration_eca	1.0.0-rc5	1.0.0
drupal/ai_provider_amazeeio	1.4.2	1.4.3
drupal/drupal_cms_content_type_base	2.1.4	2.1.5

drupal/core stays at 11.4.6 and vardot/varbase at 11.0.0. 406 packages, unchanged in count.

Release order for this one

11.0.7 was tagged in the same push as its release commit, so the tagged commit's own pipeline had never run when the tag was created. It then failed, and Create reports never produced the acceptance testing report, which is why the report link on the 11.0.7 release node is broken.

11.0.8 goes in the opposite order: this MR is merged first, the resulting 11.0.x commit's own pipeline is confirmed green, and only then is the 11.0.8 tag pushed as a separate push at that commit. The tag pipeline, including Create reports, is confirmed green before the release node is published.

AI-Generated: Yes

Checkpoints:

• File an issue
• Addition/Change/Update/Fix
• Testing to ensure no regression
• Automated unit testing coverage
• Automated functional testing coverage
• UX/UI designer responsibilities
• Readability
• Accessibility
• Performance
• Security
• Developer Documentation
• User Guide Documentation
• Reviewed by human
• Code review by maintainers
• Full testing and approval
• Credit contributors
• Review with the product owner
• Release notes snippet
• Release