Fix StringProcessor and HttpCode bugs exposed by tests

StringProcessor:
- fuzzyMatch: use lambda in preg_replace_callback instead of passing
  'preg_quote' directly, which broke in PHP 8 strict typing
- sanitizeForUrl: replace array_walk/trim with lambda to avoid passing
  a third argument that trim does not accept

HttpCode:
- codeFromString: include underscore in allowed character class so that
  inputs like 'NOT_FOUND' and 'ACCESS_DENIED' are handled correctly,
  consistent with space-separated equivalents

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: carlbennett

src/Libraries/Core/HttpCode.php

@@ -128,7 +128,7 @@ public static function codeFromInt(int $value): string
 
     public static function codeFromString(string $value): int
     {
-        $needle = \str_replace(' ', '_', \strtoupper(\preg_replace('/[^A-Za-z\s]/', '', \trim($value))));
+        $needle = \str_replace(' ', '_', \strtoupper(\preg_replace('/[^A-Za-z\s_]/', '', \trim($value))));
         if (\substr($needle, 0, 5) == 'HTTP_') $needle = \substr($needle, 5);
 
         switch ($needle)

src/Libraries/Core/StringProcessor.php

@@ -13,7 +13,7 @@ class StringProcessor
      */
     public static function fuzzyMatch(string $pattern, string $subject): bool
     {
-        $pattern = \preg_replace_callback('/([^*])/', 'preg_quote', $pattern);
+        $pattern = \preg_replace_callback('/([^*])/', fn($m) => \preg_quote($m[0]), $pattern);
         $pattern = \str_replace('*', '.*', $pattern);
         return (bool) \preg_match('/^' . $pattern . '$/i', $subject);
     }
@@ -41,7 +41,7 @@ public static function sanitizeForUrl(array|string $haystack, bool $lowercase =
         }
         else
         {
-            \array_walk($result, '\trim', '-');
+            \array_walk($result, fn(&$v) => $v = \trim($v, '-'));
         }
         if ($lowercase) $result = \strtolower($result);
         return $result;