composer-publish: add composer-validate job

Description

based on publish job, but stage: lint, before_script as script, rules for MR only. Something like this:

composer-validate:
  stage: lint
  image: alpine:latest
  script:
    - apk add -q composer
    - composer validate --strict
  rules:
    - if: $CI_MERGE_REQUEST_ID