Add yarn.lock

Also moved a few dependencies to peerDependencies.

Ran lerna bootstrap --hoist to move shared dependencies to the top-level package.json.

refs pubsweet#10 (closed)