CI check to keep the lockfiles in sync

Currently there are no checks to keep the lockfile in sync. 

The approach could be adding a make target that is works locally, runs the docker image build, gets the internal lockfile and compares it against the one in the repo to break on any inadvertent changes.