Lock file improvements

[MordragT]

• lock file shouldnt incorporate hash of built package but just hash of sources
• split up lock file to one local and one in store

so pipeline:
recipe + local lock file(needed for installation)
-> store lock file (calculated from recipe + local)
-> if store lock file is present and its ouput (the builded package)
-> then do nothing it is already installed
-> else check if substitute is present in peers
-> if yes download store lock's output package
-> if no build from source