Disable package-lock.json file in Kresus

Wwe are putting strict versions in the package.json file

Also add a comment about the `package.json` rule we are following in
`CONTRIBUTING.md` and a new linting check to enforce it.
1 job for no_package_lock in 2 minutes and 53 seconds (queued for 1 second)
latest
Status Name Job ID Coverage
  Test
passed tests #26629

00:02:53