Update composer manifest

- Some of the dependencies in `composer.lock` are ridiculously
  outdated.
- Maintaining a custom TYPO3 Flow repository is not necessary any
  more, because relevant patches have been merged into the 2.3 branch
  (yay!)