gitignore composer.lock and add note about stability flag to readme