DEVS-9441: Safeguard work with dependency manager

[onexsan]

Note

Pins devDependency versions, moves react/react-dom from dependencies to dev (kept as peers), and adds .npmrc with save-exact=true.

• Dependency management:
  • Add .npmrc with save-exact=true to enforce exact versions.
  • In package.json:
    • Remove react and react-dom from dependencies; keep as peerDependencies and add to devDependencies.
    • Pin all devDependencies to exact versions (remove carets).
  • In package-lock.json:
    • Reflect above by marking react, react-dom, scheduler, loose-envify, etc. as dev: true and aligning exact versions.
• Runtime deps:
  • dependencies now only includes @wert-io/widget-initializer.

^{Written by Cursor Bugbot for commit 3597b5c. This will update automatically on new commits. Configure here.}