chore: use compsoer 2.10's Dependency Policy Configuration

[jkowalleck]

Is your feature request related to a problem? Please describe.

Composer 2.10 was released, bringing a new feature: Dependency Policy Configuration
see https://blog.packagist.com/composer-2-10-release/#dependency-policy-configuration

goal: use this feature!

Describe the solution you'd like

configure config.policy in composer.json file

Describe alternatives you've considered

Additional context

Contribution

• I am willing to provide an implementation
• I will wait until somebody else implements it