Ignore the composer.lock file

I wasn't aware that it doesn't make any sense to include the composer.lock-file
for libraries.
I thought the versions specified in the lock-file would be used, but that
doesn't make any sense.
Stupid me!