dev: add npmrc with package-lock set to true

adds a .npmrc file to create/update the package-lock.json file regardless
of a developers local settings.

.npmrc

@@ -0,0 +1 @@
+package-lock=true