composer.json: bump phpunit for use with latest, pessimistic versioning for phpcs