composer: limit subdependency version

Problem: The latest version of a dependency of a dependency is broken.

Solution: Mark this dependency version as conflicting in the main composer.json:

{
    "conflict": {
        "drupal/consumers": "1.22.0"
    }
}