Strategy: composer

Experimental implementation for composer. 
This `composer update --prefer-source --no-interaction` is work around.

see: [Composer hitting GitHub API rate limits - CircleCI](https://circleci.com/docs/composer-api-rate-limit)