Use NPM scanner to identify Angular etc. dependencies of cbgt

cbgt includes a package.json file which should be canonical for 98% of what they use. However Black Duck cannot scan that location and raises an error because the corresponding package-lock.json (produced by npm) is not available. Please add this file in rest/static/lib/angular and rest/static/lib/angular-route and ensure it is kept up-to-date when package.json changes in future.