chore: use compsoer 2.10's Dependency Policy Configuration

## Is your feature request related to a problem? Please describe.

Composer 2.10 was released, bringing a new feature: Dependency Policy Configuration
see https://blog.packagist.com/composer-2-10-release/#dependency-policy-configuration

goal: use this feature!

## Describe the solution you'd like

configure `config.policy` in `composer.json` file

## Describe alternatives you've considered

-

## Additional context

-

## Contribution

- [x] I am willing to provide an implementation
- [ ] I will wait until somebody else implements it