Add scopes to the IPM lock file

The initial iteration of the IPM lock file did not take into consideration scoped dependencies for a module and how those should be handled. This issue was created to go back and address that.

Work involed:
- Make a decision on how scoped dependencies should be treated (separate array, no change, etc.)
- Update design doc with decision
- Implement those changes
- Add a new test in the integration suite for scoped dependencies