during docker build, use our yarn.lock

closes #2352

this ensures that a build will fail if yarn.lock is not in sync with package.json