Update composer.lock and patches.lock.json for Drupal core 11.4.7

Problem/Motivation

Part of the Varbase Project 11.0.9 release, #3622591.

After Back to DEV (e000674b), 11.0.x has no committed composer.lock or patches.lock.json. The 11.0.8 lock files were generated before these releases:

• drupal/core 11.4.7 (11.0.8 has 11.4.6)
• vardot/varbase-patches 11.0.46 (11.0.8 has 11.0.43)
• vardot/drupal-core-patches 11.4.0.7 (11.0.8 has 11.4.0.6)

Steps to reproduce

1. Read composer.lock at tag 11.0.8: drupal/core 11.4.6, vardot/varbase-patches 11.0.43, vardot/drupal-core-patches 11.4.0.6.
2. Check Packagist: drupal/core 11.4.7, vardot/varbase-patches 11.0.46 and vardot/drupal-core-patches 11.4.0.7 are available.
3. Read composer.json on 11.0.x: version 11.0.x-dev, no committed lock files.

Proposed resolution

• Regenerate composer.lock and patches.lock.json in DDEV for drupal/core 11.4.7, vardot/varbase-patches 11.0.46 and vardot/drupal-core-patches 11.4.0.7.
• Set the version to 11.0.9 in composer.json.
• Update CHANGELOG.md and the README badge.

Remaining tasks

• ✅ File an issue
• ✅ Addition/Change/Update/Fix
• ✅ Testing to ensure no regression
• ➖ Automated unit/functional testing coverage
• ➖ Developer Documentation support
• ➖ User Guide Documentation support
• ➖ UX/UI designer responsibilities
• ➖ Accessibility and Readability
• ❌ Reviewed by a human
• ❌ Code review by maintainers
• ❌ Full testing and approval
• ❌ Credit contributors
• ❌ Review with the product owner
• ✅ Update Release Notes
• ✅ Release varbase_project-11.0.9

User interface changes

• N/A

API changes

• N/A

Data model changes

• N/A

Release notes snippet

• Update composer.lock and patches.lock.json for drupal/core 11.4.7, vardot/varbase-patches 11.0.46 and vardot/drupal-core-patches 11.4.0.7.

AI-Generated: Yes