Add "prefer-stable": true to composer.json

"prefer-stable": true is already set in composer.json of bolt/bolt, but it has no effect here as it only works on root.