add locking of deps via rebar_lock_deps_plugin for reproducible builds!