Update guzzle

* Remove `composer.lock` from version control, so CI is more like real-world use
* Use a more friendly version requirement for Guzzle now that all required functionality is available in stable releases

cc @dhotson