make sure to ignore composer.lock

This just removes the duplicate phar entry in .gitignore, removes the composer.lock file, and sets git to ignore that as well