re-added composer.lock

why was i not tracking this…