Add `yarn.lock` to source to make builds deterministic.

[Ryan Roemer]

• We presently do a yarn install --frozen-lockfile which is great to make sure no one makes package changes without updating the lock file.
• The lockfile gives us build determinism to avoid awkward unrelated build failures like in: ub.com//pull/44

Task:

• Create and add yarn.lock to git source.