chore(deps): resolve conduction/hydra-gates v1.7.3 in composer.lock (#501)

Lock-only. composer.json is untouched: the ^1.0 constraint is correct and
stays floating.

v1.7.3 removes two conditional paths from the shared phpstan-base.neon
(%cwd%/vendor-bin and %cwd%/lib/Resources/template). A conditional path in a
shared base has no spelling that is safe on both PHPStan majors: plain is
validated and ABORTS on PHPStan 2.x, the '(?)' marker is parsed as a NEON
entity after a %...% expansion and crashes 2.x, and quoting it stops 1.x from
stripping the marker so the exclusion silently matches nothing.

This app is on PHPStan 1.12.x, so it is not broken today, but it carries the
landmine until it moves to PHPStan 2. It has neither vendor-bin nor
lib/Resources/template, so no phpstan.neon change is needed.

Author: rubenvdlinde