Remove dev stability setting
Add composer.lock

Adding lockfile to VCS as recommended by the composer documentation
Ignore vendor directory