Put PHPUnit in Composer's require-dev

PHPUnit won't be required for production usage of Pharborist, so it makes sense to put it only in the dev requirements. (Having it in the main requirements also causes a version conflict when trying to install Pharborist using the Composer Manager module, and I'm thinking this will clear that up.)