Document in `CONTRIBUTING` a step to include lockfiles (#4025)

## Motivation and Context
This PR adds a step in `CONTRIBUTING` for contributors to include the
updated lockfiles in pull requests. While comitting lockfiles in pull
requests isn't strictly necessary—since the weekly bot PR will
automatically update them anyway—it’s added explicitly for clarity.

----

_By submitting this pull request, I confirm that you can use, modify,
copy, and redistribute this contribution, under the terms of your
choice._