[backport] Add funding info in composer.lock

Problem/Motivation

Composer 1.10 ships with a new feature which matters a lot to us as open-source project maintainers: Information on funding open-source projects and the new command composer fund.

See Composer 1.10: composer fund, https://blog.packagist.com/composer-fund/

Proposed resolution

Composer version 1.10.5

Remove vendor, run composer update --lockto get a patch.

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet