chore(deps): bump the php-dependencies group with 2 updates

Bumps the php-dependencies group with 2 updates: [endroid/qr-code](https://github.com/endroid/qr-code) and [nelmio/security-bundle](https://github.com/nelmio/NelmioSecurityBundle).


Updates `endroid/qr-code` from 5.0.9 to 5.1.0
- [Release notes](https://github.com/endroid/qr-code/releases)
- [Commits](endroid/qr-code@5.0.9...5.1.0)

Updates `nelmio/security-bundle` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/nelmio/NelmioSecurityBundle/releases)
- [Changelog](https://github.com/nelmio/NelmioSecurityBundle/blob/master/CHANGELOG.md)
- [Commits](nelmio/NelmioSecurityBundle@v3.4.0...v3.4.1)

---
updated-dependencies:
- dependency-name: endroid/qr-code
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: php-dependencies
- dependency-name: nelmio/security-bundle
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>