Merge pull request #7 from bytecodealliance/cfallin/fix-ci

Fix CI, again: borrow package-lock.json for github-release from elsewhere.

Author: cfallin