replace abandoned facebook/xhprof dependency

[dvc]

see https://packagist.org/packages/facebook/xhprof

This package is abandoned and no longer maintained. The author suggests using the lox/xhprof package instead.