fix: lockfile setting adds lockfile to allowed gitignore

lib/content/gitignore

@@ -12,6 +12,9 @@
 !/README*
 !/LICENSE*
 !/CHANGELOG*
+{{#if lockfile}}
+package-lock.json
+{{/if}}
 {{#each ignorePaths}}
 {{.}}
 {{/each}}

test/apply/lockfile.js

@@ -0,0 +1,28 @@
+const t = require('tap')
+const setup = require('../setup.js')
+
+t.test('lockfile', async (t) => {
+  const s = await setup(t, {
+    package: {
+      templateOSS: {
+        lockfile: true,
+      },
+    },
+  })
+  await s.apply()
+  const gitignore = await s.readFile('.gitignore')
+  t.ok(gitignore.includes('package-lock.json'))
+
+  const npmrc = await s.readFile('.npmrc')
+  t.ok(npmrc.includes('package-lock=true'))
+})
+
+t.test('no lockfile by default', async (t) => {
+  const s = await setup(t)
+  await s.apply()
+  const gitignore = await s.readFile('.gitignore')
+  t.ok(!gitignore.includes('package-lock.json'))
+
+  const npmrc = await s.readFile('.npmrc')
+  t.ok(npmrc.includes('package-lock=false'))
+})