Move composer.json to app dir, fix PBC warning