wrap composer call with deployment key

Composer calls should be wrapped with the GIT wrapper for access from private repositories