Bump phan/phan from 3.2.8 to 4.0.1

Bumps [phan/phan](https://github.com/phan/phan) from 3.2.8 to 4.0.1.
- [Release notes](https://github.com/phan/phan/releases)
- [Changelog](https://github.com/phan/phan/blob/v4/NEWS.md)
- [Commits](https://github.com/phan/phan/compare/3.2.8...4.0.1

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>