Try the new "Composer update vulnerabilites" workflow

[aguingand]

• Add a new secrets.GITHUB_REPOSITORIES_TOKEN_CU that has access to all repos
• Test in one project first
• Uncomment "commit + create PR part"