Description

This PR adds support for restricting #[IsGranted] validation to specific HTTP methods via a new $methods argument.

What's New

You can now define access control per HTTP method directly in the #[IsGranted] attribute. This allows greater flexibility when securing controller actions that handle multiple HTTP verbs.

#[IsGranted('ROLE_ADMIN', methods: ['GET', 'POST'])]
public function someAction() {}

#[IsGranted('ROLE_ADMIN', methods: 'POST')]
public function otherAction() {}

• If the current request method does not match, the attribute is ignored.
• If the method matches, the usual access check logic runs as expected.

This change aligns #[IsGranted] more closely with other HTTP-aware attributes like:

• #[IsCsrfTokenValid]
• #[IsSignatureValid] (currently under review)