Update Alert to 0.9.0, .gitignore, composer.lock

 - Update Alert to v0.9.0 in composer and submodule
 - Update .gitignore to ignore composer data in
   vendor directory
 - Add composer.lock to repo