Update Drupal and other Composer-managed dependencies

Drupal 10.3 is availble and we should upgrade this and other Composer-managed dependencies. We have to check whether the version is compatible and whether we can drop any of the patches we currently apply. This would also be a good place to fix up the inconsistencies which appears to have cropped up in our Composer lock file, most likely due to botched rebases.