BUGFIX: Avoid insecure composer/composer versions

[kdambekalns]

This adjusts the dependency to ~2.2.24 || ^2.7.7 to avoid versions vulnerable to multiple command injections via malicious branch names.

More details in:

• https://blog.packagist.com/composer-2-7-7/
• https://github.com/advisories/GHSA-v9qv-c7wm-wgmf
• https://github.com/advisories/GHSA-47f6-5gq3-vx9c

Checklist

• [x] Code follows the PSR-2 coding style
• [ ] ~Tests have been created, run and adjusted as needed~
• [x] The PR is created against the lowest maintained branch
• [x] Reviewer - PR Title is brief but complete and starts with FEATURE|TASK|BUGFIX
• [x] Reviewer - The first section explains the change briefly for change-logs
• [ ] ~Reviewer - Breaking Changes are marked with !!! and have upgrade-instructions~