Use proper SemVer comparison in CheckComposerLockUpToDate