Matches .lock files hashes as secrets

[schoettler]

Steps to reproduce:

1. Clone the boilerplate
2. Install on root folder
3. Install on api/
4. Fake a new dependency on api/, e.g: yarn add kek
5. Commit change