This adds checks for composer and npm for their respective .lock files. When someone makes changes to composer.json or package.json without updating the respective .lock file, the build should fail.
Testing Instructions
Right now the repo seems to have an out-of-date composer.lock, so this should fail now. So when this fails for the right reasons, we can then update the .lock files and merge this one.
Thanks!