fix: update composer and fix dependencies

Changes:
- update composer.phar to latest stable (2.5.8)
- rollback pinning indirect dependencies

app/composer.json

@@ -12,7 +12,6 @@
         "kamisama/cake-resque": "4.1.2",
         "pear/crypt_gpg": "1.6.7",
         "monolog/monolog": "1.24.0",
-        "thecodingmachine/safe": "^1.0",
         "spomky-labs/otphp": "^10.0",
         "bacon/bacon-qr-code": "^2.0"
     },
@@ -39,14 +38,16 @@
         "aws/aws-sdk-php": "To upload samples to S3",
         "jakub-onderka/openid-connect-php": "For OIDC authentication",
         "supervisorphp/supervisor": "For managing background jobs",
-        "lstrojny/fxmlrpc": "Required for supervisorphp/supervisor XML-RPC requests",
         "guzzlehttp/guzzle": "Required for supervisorphp/supervisor XML-RPC requests",
+        "lstrojny/fxmlrpc": "Required for supervisorphp/supervisor XML-RPC requests",
         "php-http/message": "Required for supervisorphp/supervisor XML-RPC requests",
-        "spomky-labs/otphp": "Required for strong authentication with TOTP",
-        "bacon/bacon-qr-code": "Required for strong authentication with TOTP"
+        "php-http/message-factory": "Required for supervisorphp/supervisor XML-RPC requests"
     },
     "config": {
         "vendor-dir": "Vendor",
-        "optimize-autoloader": true
+        "optimize-autoloader": true,
+        "allow-plugins": {
+            "composer/installers": true
+        }
     }
 }