make sure not to apply/check patches when running with --lock

[allanpaiste]

Make sure that patching is switched off when user only wants to update composer.lock hash by running composer update with --lock flag set.

Addresses https://github.com/cweagans/composer-patches/issues/221

[weitzman]

Seems reasonable. I was wondering why we do that.

[cweagans]

I think there's a property on one of the Composer objects that we can look at, isn't there? This seems like a really reasonable thing to do - just not 100% sure on the approach.

[davereid-pfg]

Just a heads up that there's lots of documentation that when you change patches in your composer.json file, we've been always advised to run composer update --lock to get the new patches applied. There is no composer update nothing kind of command. We would need new guidance on how to accomplish this.

[cweagans]

#447 should handle this. I've made a note to ensure that there's some mechanism to force patches to be applied.