Add the lockfile to the repo

This shows the dependency tree that allowed the build to run succssfully.  If a bad package is released, we don't have such a hard time finding out which update caused the build to break

.github/workflows/node.js.yml

@@ -23,6 +23,6 @@ jobs:
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm install -g codecov
-    - run: npm install
+    - run: npm ci
     - run: npm test
     - run: codecov

.gitignore

 dist/
 coverage/
 node_modules/
-package-lock.json
 *.log
 *.tgz
\ No newline at end of file