Add package-lock.json.

[smblott-github]

npm is asking that this be included in the repo (and that's what the internet seems to think too).