Bump outdated dependency on bacon/bacon-qr-code

[mmikkel]

Craft 5 currently depends on bacon/bacon-qr-code with the dependency constraint ^2.0.

This is blocking us from upgrading a Craft 4 project that has a dependency on endroid/qr-code, which requires bacon-qr-code:^3.0.

Based on the dependency graph only, in theory we could downgrade endroid/qr-code in our project from 6.x to 4.x. But, considering bacon-qr-code 2.0.8 (the version currently required by Craft) was released in December 2022, and the only breaking change in 3.x appears to be that support for PHP <8.1 was dropped, it might be a good idea to bump Craft's version constraint on this package?