Remove composer.lock from repo

Since we are not deploying for a certain environment, it doesn't
make sense to have composer.lock committed to the repo.  Instead,
interested developers should `composer install`.