Resolve the SDK by version from the registry, not from a git URL

package.json names @novox/mesh-sdk by version and the install is a
buildkit-secret-mounted resolve from the mesh's package registry, closing the
git-URL half of issue 053. The lock is regenerated against the registry (a
follow-up switches install to ci with a committed lock).

Claude-Session: https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx

package.json

@@ -11,7 +11,7 @@
     "test": "node --test --experimental-strip-types 'test/*.test.ts'"
   },
   "dependencies": {
-    "@novox/mesh-sdk": "git+https://git.novox.be/novox/mesh-sdk.git#9213336",
+    "@novox/mesh-sdk": "^0.1.0",
     "amqplib": "^0.10.9"
   },
   "devDependencies": {