chore(js): drop react-grab devDep, load only via unpkg

The sandbox loads react-grab as a global script from unpkg in
template.html, so the npm package isn't imported anywhere. Removing
the devDependency also drops its transitive tree (bippy, ora, etc.)
from the lockfile.

Author: kylemac

packages/clerk-js/package.json

@@ -114,7 +114,6 @@
     "bundlewatch": "^0.4.2",
     "jsdom": "26.1.0",
     "minimatch": "^10.2.5",
-    "react-grab": "^0.1.37",
     "webpack-merge": "^5.10.0"
   },
   "engines": {