Lockfile does not contain plugin hashes

[I-Al-Istannen]

Plugins are mostly normal dependencies and can influence the build in arbitrary ways. Ensuring their version stays the same is paramount for producing the same outputs.