Delete `package-lock.json`

It's unused (the script call `npm install` not `npm ci` and so ignores
the lock file) and now causing ~spurious issues from package vulnerability
scanners.

Bug: b/312505248#comment7
Change-Id: I3ecdf2f223160e9235280647d3f7343549c5d52d
1 file changed