chore(deps): regenerate lockfile after A1 file: → bare-workspace rewrite

Lockfile reflects:
- 11 file: -> bare semver "*" workspace deps (calm-core, mcp-server,
  github-action, vscode-extension, web-component, apps/studio)
- calm-suite/calm-studio/packages/calmscript entry removed (directory
  deleted in A1's first commit)
- @docusaurus/faster@3.10.1 retained (added by finos#2673 on main)
- minimatch@10.2.5 hoisted to root (matches main; vsce CJS require works)
- @codemirror/autocomplete@6.20.3 preserved (svelte-codemirror-editor peer)
- All 19 rollup platform-specific optional dependency variants preserved
  (validate-lockfile guard upheld)

Regen method: incremental `npm install --package-lock-only` against the
current origin/main lockfile, then a one-line jq script to remove the
stale `calm-suite/calm-studio/packages/calmscript` entry. Avoids the
known arborist crash on a clean `rm -rf node_modules package-lock.json
&& npm install` flow.

Verified locally:
- `npm ci` exits 0
- `cd calm-suite/calm-studio && npx multi-semantic-release --dry-run` exits 0
  (8 @calmstudio/* packages discovered)
- `npm run package --workspace calm-plugins/vscode` exits 0 (vsce packages
  8.5 MB .vsix)

Signed-off-by: Gourav Shah <gjs@opsflow.sh>

Author: gjs-opsflo