Don't commit your composer lock files

I shouldn't commit my composer.lock file if I am trying to run .gitlab-ci.yml for multiple versions of PHP. For example, see https://gitlab.com/kfree/php/phpci/-/jobs/29617233