Exclude composer.lock from tracking