Adding lockfile to chef-client runs

@meatballhat @alexschlessinger please sanity check.  Uploaded to tools because it's locked in tools envs.  Not uploaded to platform because it's not locked (will upload after review and merge).