Remove package-lock.json

Using both `package-lock.json` and `yarn-lock.json` can cause confusion
and lead to potential issues, so we'll just use one, `yarn-lock.json`.
:smiley:

Refs: #2380