Update herrera-io/box to support extracting without ext-phar
Support running phar archives with no ext-phar
Update herrera-io/box to v1.5