/workspace:
composer install --no-interaction. The helper uses
the host user’s UID and GID, bind-mounts the project root, and runs Composer from
that mounted checkout. Commands such as require, remove, and update therefore
persist changes to the checked-in composer.json and composer.lock instead of
modifying the disposable application image.
Composer also populates the Bedrock installer destinations at web/app/mu-plugins,
web/app/plugins, and web/app/themes. WordPress dev-mode bind-mounts all three
directories so the running application sees a local install immediately. With dev
mode disabled, rebuild and deploy after changing Composer dependencies so the
application image is recreated from the updated lockfile.
