Pin remote compose dependencies on regular compose

Before this change all changes to regular compose were invalidating
majority of remote compose tests. To reduce this blast radius pin
compose dependencies from remote compose as it is highly unlikely that
regular compose will break remote compose without noticing.

Note, that JVM test coverage will be unchanged as we run with max_deps.
This does decrease ToT regular compose vs ToT remote compose device test
coverage, but remote compose is not meant to be testing regular compose.

Bug: 544826464
Test: ./gradlew -p compose/remote assembleAndroidTest
      before ran 2121 tasks, now runs 1469 tasks
Change-Id: Id5ba137f7bd13eca8910303f8cc4499af12b28f9