Create an action that fails if the user has committed package-lock

Users are committing package-lock and pnpm-lock We're restricting the repo to yarn, so any PR that adds either of these should be rejected

Let's add a workflow that checks this

I am adding the workflow