Adds corresponding NPM lockfiles to package.json files. This enumerates dependencies, including transitive ones, and their versions, to avoid using vulnerable ones. For more details, see go/npm-lockfile-cl-guide

Change-Id: Ic1d9bc13fc2c1524ae844f222e480e2d528d647e