Automagically generate replacement updates when a Packagist-abandoned package has a replacement

[jamietanna]

Via #44037, given there's a maintainer-suggested replacement, we should surface this to users.

As no version is specified in the metadata, this will need to be specified as the latest version the package has.

Might require a bit more effort, given extractReleaseResult doesn't look like it'll allow this by default, and it may then require an additional lookup