[Security] Bump twig/twig from 1.36.0 to 2.6.0

Bumps [twig/twig](https://github.com/twigphp/Twig) from 1.36.0 to 2.6.0. **This update includes security fixes.**
- [Release notes](https://github.com/twigphp/Twig/releases)
- [Changelog](https://github.com/twigphp/Twig/blob/2.x/CHANGELOG)
- [Commits](https://github.com/twigphp/Twig/compare/v1.36.0...v2.6.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>

composer.json

@@ -55,7 +55,7 @@
         "nexmo/client": "^1.5",
         "pragmarx/google2fa": "^0.7.1",
         "predis/predis": "^1.1",
-        "twig/twig": "^1.35"
+        "twig/twig": "^2.6"
     },
     "require-dev": {
         "ext-sqlite3": "*",