fix(deps): centralize workspace dependency pins

[brendanjryan]

Motivation

Workspace-wide overrides masked newer dependency declarations in package manifests, so local builds and published metadata could resolve different versions.

Summary

• Added a pnpm catalog for the pinned Ox, TypeScript, and file-type versions.
• Referenced the catalog from root and example manifests and workspace overrides.
• Added a patch changeset for the published dependency correction.

Key design considerations

• Retained the existing versions until their major upgrades can be validated independently.
• Used pnpm's publish-time catalog resolution so consumers receive concrete dependency versions.
• Kept the lockfile unchanged because effective installed versions did not change.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/mppx@762

commit: a1480e4

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.