* Hold the package-lock.json at the lockfileVersion 2 level, which mandates node 16.
* Add metafile check, making sure nobody commits package-lock file with an ancient npm.
* Update lock file.