shopware/platform OAuth user repository timing attack vulnerability

A timing attack vulnerability in the OAuth user repository allows enumeration of administrator usernames.

All Shopware installations using the default login (not SSO-only).

Apply the fix by adding a dummy password_verify call before the early return for non-existing users.