Fix #3111: Fix dependencies of vscode-dotty

Add a package-lock.json file to fix the dependencies to known good
versions instead of letting npm install pick whatever it wants that
respects semantic versioning.

Author: smarter