Verify package-lock when linting

Use https://www.npmjs.com/package/lock-verify to ensure the
package-lock.json is in sync with package.json.

Author: novemberborn