Add composer.lock for deployment to Heroku