Use truncated sha1 from push for version

- Instead of trying to determine if we received a sha1 in the worker and
  then normalizing it, normalize it before passing to gearman.
Install composer deps prior to building phar