chore(deps): pin metro-* family to 0.83.3 via pnpm.overrides

Fixes the metro-symbolicate version skew (nested 0.82.5 copies under
metro@/metro-source-map@) that broke the release JS bundle step
("SourceMetadataMapConsumer is not a constructor" in composeSourceMaps).
Required a clean reinstall (rm -rf node_modules && pnpm install) to drop
the stale nested dirs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

package.json

@@ -15,5 +15,20 @@
     "node": ">=20",
     "pnpm": ">=9"
   },
-  "packageManager": "pnpm@10.23.0"
+  "packageManager": "pnpm@10.23.0",
+  "pnpm": {
+    "overrides": {
+      "metro": "0.83.3",
+      "metro-cache": "0.83.3",
+      "metro-config": "0.83.3",
+      "metro-core": "0.83.3",
+      "metro-file-map": "0.83.3",
+      "metro-resolver": "0.83.3",
+      "metro-runtime": "0.83.3",
+      "metro-source-map": "0.83.3",
+      "metro-symbolicate": "0.83.3",
+      "metro-transform-plugins": "0.83.3",
+      "metro-transform-worker": "0.83.3"
+    }
+  }
 }

pnpm-lock.yaml

@@ -4,6 +4,19 @@ settings:
   autoInstallPeers: true
   excludeLinksFromLockfile: false
 
+overrides:
+  metro: 0.83.3
+  metro-cache: 0.83.3
+  metro-config: 0.83.3
+  metro-core: 0.83.3
+  metro-file-map: 0.83.3
+  metro-resolver: 0.83.3
+  metro-runtime: 0.83.3
+  metro-source-map: 0.83.3
+  metro-symbolicate: 0.83.3
+  metro-transform-plugins: 0.83.3
+  metro-transform-worker: 0.83.3
+
 patchedDependencies:
   metro-core@0.83.3:
     hash: dbd76dee4e5497574765c5986b0e889264e7251ea7b5e849e2967d2eb2efb757