composer: replace xmlseclibs svn source with our git copy

This mirrors the configuration used in simplesamlphp/saml2.
It lifts the requirement to have subversion present on your machine.

You may want to run `composer update` after merging, but since this has some other side effects I didn't include it in the pull request.