The wasm crates are outside the root workspace and carry their own
lockfiles, which still pinned the xet-* crates at 1.6.0. ci.yml builds
both and then asserts the lockfile has no uncommitted changes, so the
stale pins failed "Build WASM".

Covers the four lockfiles CI enforces: root, hf_xet, hf_xet_wasm and
hf_xet_thin_wasm. examples/xet_pkg_napi and simulation/* carry their own
lockfiles too (still at 1.5.3), but nothing builds or checks them.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Hpd3QVfkg7AGwmnxJzdCyf