Move composer.json validation into target "verify".
Fix task "composer-validate" which was unable to locate composer binary.