Delete unused package-lock.json

We control JS dependencies with `yarn` instead of `npm`, so this file is
redundant - and we risk them getting out of sync, as it probably is
right now (last updated in 2018, vs `yarn.lock` which has recent
modifications).