Upgrade to the backwards-compatible lockfile v2 (#2968)

V2 is used by node v16 (npm v7) which we now use by default.

Author: past