Sync package lock version for release

[chubes4]

Summary

• Sync package-lock workspace package versions to the current 0.5.0 package metadata.
• Keeps npm install from dirtying a fresh checkout before the next Homeboy release.

Testing

• npm install
• npm run build (via npm prepare)
• homeboy release wp-codebox --dry-run --path /Users/chubes/Developer/wp-codebox@release-wp-codebox-20260604 (confirmed the previous blocker was the dirty package-lock.json)

AI assistance

• AI assistance: Yes
• Tool(s): OpenCode (gpt-5.5)
• Used for: Diagnosed the release dry-run blocker and prepared the lockfile sync PR. Chris remains responsible for review and merge.