add 'composer self-update' step

... in case the user has a very old version without a --no-dev flag.

(see parent commit)