Clean up/remove project_composer_project_release_create_package()
In project_composer_module_implements_alter(): project_release_create_package-related code can be removed. Before project_dependency was merged into this project, ordering was important. Now project_composer_project_release_create_package() is the only implementation of hook_project_release_create_package() in www.drupal.org’s codebase.
In project_composer_project_release_create_package(), https://git.drupalcode.org/project/project_composer/-/blob/a0d452262b0a90d3ff45d658b6d86784f429a48f/project_composer.module#L80-91 - the call to project_composer_process_release() and surrounding code should be removed and replaced with a separate stage in the Jenkins packaging job. This will somewhat simplify code, and allow for ordering packaging stages when introducing TUF signing.
The rest of the function, the call to project_composer_process_release_dependencies() may want to be rearranged, too. If the whole hook implementation goes away, we can remove hook_project_release_create_package() hook invocation.