Add support to scan for npm package-lock.json when scanning a NuGet solution/project

[rhessinger]

It should only look for alternative package types when the --type parameter is not specified, which triggers the auto type.