Stop committing package-lock.json

[Natshah]

Problem/Motivation

package-lock.json is committed to this repository. The webship-js step-pack family is
dropping the committed lockfile so that the published packages resolve their peer
webship-js version at install time rather than pinning a stale tree.

Steps to reproduce

1. git ls-files package-lock.json — the lockfile is tracked.

Proposed resolution

Remove package-lock.json from version control and add it to .gitignore.

This repository's workflows do not use npm ci, so no CI change is required here.

Checkpoints

• File an issue about this project
• Addition/Change/Update/Fix to this project
• Testing to ensure no regression
• Automated unit/functional testing coverage
• Developer Documentation support on feature change/addition
• User Guide Documentation support on feature change/addition
• Accessibility and Readability
• Reviewed by a human
• Code review by maintainers
• Full testing and approval
• Credit contributors
• Review with the product owner
• Update Release Notes
• Release