Restore and update package-lock

* use package-lock from www-covidcast
* apply updated version and hash from www-covidcast-classic

Author: krivard