Adding `composer.lock` to ignores (not a deployable project)