Better lockfile support for composite builds

[dellisd]

When doing a composite build that substitutes dependencies that are present in the lockfile, you have to regenerate the lockfile in order to complete any builds/IDE syncs because those dependencies become "project" dependencies that are excluded from the lock state.

We could perhaps use the gradle plugin to inspect included builds for projects that would substitute lockfile dependencies to tell Gradle to skip validating them.

https://docs.gradle.org/current/userguide/dependency_locking.html#ignoring_dependencies