fix: pin davinci-app to javascript-sdk 4.7.0 to avoid signoff regression

4.9.0 added Accept: application/json to all requests, causing PingOne's
/signoff endpoint to return JSON instead of a 302 redirect, breaking the
logout e2e test.

Author: ryanbas21

e2e/davinci-app/package.json

@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@forgerock/davinci-client": "workspace:*",
-    "@forgerock/javascript-sdk": "catalog:",
+    "@forgerock/javascript-sdk": "4.7.0",
     "@forgerock/protect": "workspace:*",
     "@forgerock/sdk-logger": "workspace:*"
   },