Add a .gitignore to ignore composer.lock and the vendor directory.