Use an actual release of NMT in composer to avoid confusion

[naxoc]

I was using dev-trunk to get the latest from the NMT. That got confusing really quick, so this starts us using releases instead.

How to test

• composer install and check that you can run some wp cli commands with no error.

---

• [ ] confirmed that PHPCS has been run