chore: remove accidentally committed package-lock.json and tsconfig.tmp

This repo uses yarn (yarn.lock), not npm. The package-lock.json was
generated during local development and contains a low-severity advisory
(GHSA-j965-2qgj-vjmq) that trips the dependency review check.

Author: jensenbox