don't commit composer.lock

Signed-off-by: devxdev <xdev@devxdev.com>