feat: document platform dependencies

[jkowalleck]

Extraneous dependencies and platform requirements should be marked as such. Relevant CycloneDX specification: https://github.com/CycloneDX/specification/issues/321

How this is specified in composer: https://getcomposer.org/doc/articles/composer-platform-dependencies.md

The following types of platform packages exist and can be depended on:

PHP (`php` and the subtypes: `php-64bit`, `php-ipv6`, `php-zts php-debug`)
PHP Extensions (`ext-*`, e.g. `ext-mbstring`)
PHP Libraries (`lib-*`, e.g. `lib-curl`)
Composer (`composer`, `composer-plugin-api`, `composer-runtime-api`)

To see the complete list of platform packages available in your environment you can run php composer.phar show --platform (or show -p for short).

The differences between the various Composer platform packages are explained further in this document.