[TASK] composer.json should stick to explicit dependencies

[TASK] composer.json should stick to explicit dependencies

Having non-strict version dependencies in composer.json makes packaging
of TYPO3 CMS unreliable since:

- Cannot prevent a faulty 3rd-party package being committed right before
  the packaging script is run
- Cannot install TYPO3 CMS from git tags as a later point of time using
  the exact same 3rd-party package list

Change-Id: I7418bb856fcc79257ddb9920608b1cd435cb616c
Releases: master
Resolves: #66703
Reviewed-on: http://review.typo3.org/39153
Reviewed-by: Benjamin Mack <benni@typo3.org>
Reviewed-by: Thomas Maroschik <tmaroschik@dfau.de>
Reviewed-by: Wouter Wolters <typo3@wouterwolters.nl>
Reviewed-by: Helmut Hummel <helmut.hummel@typo3.org>
Tested-by: Helmut Hummel <helmut.hummel@typo3.org>