enshrined/svg-sanitize >=0.15 <1.0 has security advisories

Problem/Motivation

SVG Image requires enshrined/svg-sanitize >=0.15 <1.0, but enshrined/svg-sanitize is listed on several security advisories and this prevents a clean install of SVG Image.

Steps to reproduce

Running `composer require drupal/svg_image` on a clean Drupal installation aborts:

   - Root composer.json requires drupal/svg_image ^3.2 -> satisfiable by drupal/svg_image[3.2.0, ..., 3.x-dev].
    - drupal/svg_image[3.2.0, ..., 3.2.1] require enshrined/svg-sanitize >=0.15 <1.0 -> found enshrined/svg-sanitize[0.15.0, ..., 0.22.0] but these were not loaded, because they are affected by security advisories ("PKSA-8j6w-3kr7-s9xk", "PKSA-6j95-1jtb-x6wc", "PKSA-cbx2-m9db-bmzd", "PKSA-4g5g-4rkv-myqs"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.

Proposed resolution

There is no significant change in enshrined/svg-sanitize ^1.0, so increase the require to ^1.0

Remaining tasks

Refactor composer.json:

   …
   "require": {
        "enshrined/svg-sanitize": "^1.0"
    }

User interface changes

None

API changes

None

Data model changes

None