Update to composer 2.2

It comes with huge performance improvements again, but also security hardening.

However, it also needs changes to the project's composer.json: https://getcomposer.org/doc/06-config.md#allow-plugins