* remove nodejs install from src builds * fix composer auth secret path links
* refactoring composer version & auth secrets apply separate for workspaces