Update composer lifecycle

- Commit composer.lock.
 - The lock is not ignored anymore.
 - Changed to ramsey/composer-install action for cache.

.github/actions/setup-action/action.yml

@@ -41,5 +41,4 @@ runs:
       run: pip install ${{ inputs.python-deps }}
       shell: bash
 
-    - run: composer install --prefer-dist
-      shell: bash
+    - uses: "ramsey/composer-install@v3"

.gitignore

@@ -3,7 +3,6 @@
 .phpbench/
 .phpcs.cache
 .phpunit.cache/
-composer.lock
 Makefile
 phpbench.json
 phpcs.xml

REUSE.toml

@@ -1,6 +1,6 @@
 version = 1
 
 [[annotations]]
-path = [ "*.yml", "*.yaml", ".git*", "*.dist", "docs/.pages", "docs/validators/.pages", "composer.json", "tests/fixtures/*", ".github/*.yml", ".github/actions/**.yml", ".github/workflows/**.yml", ".github/PULL_REQUEST_TEMPLATE.md", ".github/ISSUE_TEMPLATE/**" ]
+path = [ "*.yml", "*.yaml", ".git*", "*.dist", "docs/.pages", "docs/validators/.pages", "composer.json", "composer.lock", "tests/fixtures/*", ".github/*.yml", ".github/actions/**.yml", ".github/workflows/**.yml", ".github/PULL_REQUEST_TEMPLATE.md", ".github/ISSUE_TEMPLATE/**" ]
 SPDX-FileCopyrightText = "Respect Project Contributors"
 SPDX-License-Identifier = "MIT"