Add composer.lock to JSON filenames

[Composer](http://getcomposer.org] uses one configuration file (composer.json)
and one lock file (composer.lock). They both use valid JSON.

Example: https://github.com/OpenBuildings/jam/blob/master/composer.lock