Commit MODULE.bazel.lock files

[jayconrod]

This ensures Gazelle developers always see the same bits when downloading
files. We should see a security error if a module version changes upstream.

[jayconrod]

Reopening until we actually have a release with a committed lock file.