Remove composer.lock from .gitignore, add note to CONTRIBUTING.md