[LOTP] Add composer

# Description of the LOTP tool

I would suggest to add also composer, as `composer install` behaves similarly to `npm install` and support install-time execution

# Configuration files

```
composer.json
```

# Documentation
https://getcomposer.org/doc/articles/scripts.md#scripts

# Real-world example
https://github.com/SAP-samples/risk-explorer-execution-pocs/tree/main/install-time/i1-technique/php

# Additional notes

I discussed this behavior in my paper [The Hitchhiker’s Guide to Malicious Third-Party Dependencies](https://dl.acm.org/doi/pdf/10.1145/3605770.3625212)

Start with the existing LOTP handling for npm install, then compare it with composer.json and Composer's scripts documentation. Use the linked PHP real-world example to understand install-time execution, and consider the work done when the LOTP tool recognizes the corresponding Composer behavior.

Written by the indexing model from the issue text.