Investigate psalm output and add it to the CI

composer run psalm gives various errors, some of those seem to be valid.

It would be nice to reduce the number of errors, and for those that can't be fixed, add them to the baseline. Then, psalm can be added to the CI steps.