Ensure composer.lock is included in repo