Composer tips for Acquia RA

[becw]

Make sure that:

1. all repos are public
2. all github repos use https://github.com URLs instead of git@github.com URLs
3. the-build and the-vagrant should be dev dependencies
4. preferred-install = dist should be set in the composer.json 'config' property
5. only tagged releases - https://getcomposer.org/doc/faqs/should-i-commit-the-dependencies-in-my-vendor-directory.md - this is probably not possible for our projects
6. ignore .git directories within vendor, web
7. add a github-oauth token to the "config" key in composer.json:

{
  "name": "palantirnet/...",
  "description": "A Drupal 8 website for ...",
  "type": "project",
  "license": "proprietary",
  ...
  "config": {
      "preferred-install": {
          "*": "dist"
      },
      "sort-packages": "true",
      "github-oauth": {
          "github.com": "..."
      }
...

[becw]

/cc @dscottd7