fix(bzlmod): use --lockfile_mode=update and add a separate job for lockfile testing

[aignas]

We add two jobs for the bzlmod example to test that lockfile is platform independent. Then we also add a .bazelversion file to the example so that the lockfile is stable. Finally we add a pre-commit hook which may help in keeping the lockfile up-to-date.

Fixes #2148