fix: correctly determine path to composer.json