[Build] Keep composer.lock and keep a .gitignore.dist

As we now ship with a working compsoer setup it makes sense to
also ship with the resulting composer.lock file. While at it also
provide a copy of our .gitignore file for optional use.