Move cta-versionlock to cta-release

Currently cta-versionlock resides somewhere in docker/. This doesn't make too much sense as it is only used for the cta-release package. The file should be moved to cta-release to make sure that these files are together.