Sort the lockfile

This ensures predictable output when installing the same set of bundles
onto multiple machines.
Merge pull request #352 from kballard/sort-lockfile

Sort the lockfile