build: Reproducible Builds

- added back `package-lock.json`
- skip jacoco on `jooby-cli` so it generates an empty `argLine`
- fix #3662

Author: jknack

.gitignore

@@ -36,5 +36,4 @@ node
 node_modules
 build
 .gradle
-package-lock.json
 !gradle-wrapper.jar

modules/jooby-cli/pom.xml

@@ -78,17 +78,19 @@
       <artifactId>mockito-core</artifactId>
       <scope>test</scope>
     </dependency>
-
-    <dependency>
-      <groupId>org.jacoco</groupId>
-      <artifactId>org.jacoco.agent</artifactId>
-      <classifier>runtime</classifier>
-      <scope>test</scope>
-    </dependency>
   </dependencies>
 
   <build>
     <plugins>
+      <plugin>
+        <groupId>org.jacoco</groupId>
+        <artifactId>jacoco-maven-plugin</artifactId>
+        <version>${jacoco.version}</version>
+        <inherited>false</inherited>
+        <configuration>
+          <skip>true</skip>
+        </configuration>
+      </plugin>
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>properties-maven-plugin</artifactId>