add package-lock needed for dbt 1.8 in read-only deployments

add package-lock needed for dbt 1.8 in read-only deployments #1222