chore: remove package-lock.json

package-lock.json is making working off git considerably
different from installing from npm. This causes confusion
as simple npm install will not get you the latest dependencies,
like it does for npm installs. Let's see how life is
without it in vcs.