feat(fix): Lock the defu package to 6.1.2. Version 6.1.3+ has a regression that prevents exported objects from merging with plain objects. Also include package-lock.json for npm users

Author: JRogaishio