Commit package-lock.json

I've resisted this for a while, but I now think the benefits outweigh
the detriments.  Commit package-lock.json, primarily so other developers
start from a known-working state.

Signed-off-by: Kevin Locke <[email protected]>

Author: kevinoid