build(lockfile): Switch lockfile to package-lock.json

Its a try to get dependabot start analyzing the lockfile.
Currently, npm-shrinkwrap.json is not supported officially by dependabot.