Instead of depending on the installed phpcs, we should bundle the phpcs/wpcs composer packages in our builds and run all of the scans from there.