Add composer lock file to ensure same version get deployed on production as tested on dev.