chore(deps): regenerate lockfile after A1 file: → bare-workspace rewrite

Lockfile reflects bare semver "*" workspace references for the 11
@calmstudio/* and @finos/calm-models entries rewritten in A1. All 6
@calmstudio/* workspace symlinks resolve (calm-core, diagram, extensions,
github-action, mcp, studio) and @finos/calm-models symlink resolves to
the top-level calm-models workspace. All 19 rollup platform-specific
optional dependency variants preserved (matches origin/main shape — npm
validate-lockfile CI workflow guard upheld).

Regen method:
The documented `rm -rf node_modules package-lock.json && npm install`
ritual crashes inside `arborist.buildIdealTree` with
`TypeError: Cannot read properties of null (reading 'matches')` on both
npm 11.12.1 (via Corepack) and npm 10.9.7 — same crash reproduces on
plain `origin/main`, confirming a pre-existing arborist dedupe bug.

Initial attempt used `npm install --force` to bypass the crash, but
`--force` skips PlaceDep dedupe, leaving `minimatch@9.0.9` nested under
`calm-plugins/vscode/node_modules/` instead of allowing `minimatch@3.1.5`
to hoist to the root `node_modules/`. That broke `@vscode/vsce`'s CJS
`require('minimatch')` (it expects the v3 default-export function, not
the v9 named export), surfacing as
`(0, minimatch_1.minimatch) is not a function` in CI on PR #2661.

Working method: keep the existing `origin/main` lockfile and run
`rm -rf node_modules && npm install --package-lock-only`. This performs
an incremental package-lock update from the current `package.json`
workspace edits without rebuilding the whole tree, so the hoist
decisions baked into `origin/main`'s lockfile are preserved
(minimatch@3.1.5 stays hoisted to root, vsce works). Then
`npm ci` installs cleanly from the updated lockfile.

Result is bitwise-equivalent to the documented ritual for the fields
`validate-lockfile` CI checks (19 rollup platform variants present)
and additionally preserves the hoist tree (minimatch@3.1.5 at root).

Signed-off-by: Gourav Shah <gjs@opsflow.sh>

Author: gjs-opsflo