Read composer updates to catch failures

[valicm]

Currently, the script is based on the composer.lock determines if the project is updated successfully. This does not work for dev versions.
and we could maybe catch some output for requiring higher versions - as for Drupal core - this would be beneficial on output
Also, the patch-applying process can be marked as a specific failure; with that, we could mark if the patch needs to be reviewed/removed for a specific project.