Add package-lock.json to prevent accidental commits of npm’s lock file. While here, remove the stray trailing space from the Thumbs.db entry for a cleaner diff.