Composer: ignore composer.lock