As a follow-up on #647 let's add composer normalize --dry-run to the CI to let it fail when the composer.json is not normalized.

https://github.com/ergebnis/composer-normalize?tab=readme-ov-file#continuous-integration