switching to clone removes dependencies which are only required by the target module

[joachim-n]

e.g. drupal/action_link requires drupal/declarative_form_ajax.

But declarative_form_ajax gets removed when switching to the clone, because the temporary composer.json file we create doesn't mention it.