Moved dependencies in composer.json to allow run without dev deps

[JanMikes]

Fixes #2185

[TomasVotruba]

These packages are dev, not production. This is not way to fix it

[JanMikes]

Then why they are required to run bin/rector if they are dev?

[TomasVotruba]

I run bin/rector reasily without them

[TomasVotruba]

E.g. here https://github.com/TomasVotruba/tomasvotruba.cz/blob/master/.travis.yml#L19

[TomasVotruba]

Not sure if, but this one might be related to PHPStan rather:
#2184

[JanMikes]

E.g. here https://github.com/TomasVotruba/tomasvotruba.cz/blob/master/.travis.yml#L19

@TomasVotruba well, this is kinda "lucky" because pehapkari.cz project has all dependencies in dev, that are otherwise failing, but for example when tried on other project, where we do not use symplify phpstan extensions and so on, this fails. It fails even for rector itself

1. git clone https://github.com/pehapkari/pehapkari.cz.git
2. composer install --no-dev
3. bin/rector --version

Imho this is definitely bug, that affects most of projects where rector is installed.

It is caused by that when running bin/rector it loads phpstan.neon which is targeted for internal use (running phpstan against repository itself) if i understand it correctly and it should not be used for analysing other repositories with rector. As mentioned by you, #2184 could do the trick