fix: scope 7 overrides to prevent cross-major-version breakage

immutable, ajv, picomatch, diff, brace-expansion, yaml, rollup —
all scoped to only bump consumers already on the target major version.
Prevents forcing e.g. ajv 8.x onto ajv ^6.x consumers.

Author: jpr5

package.json

@@ -116,18 +116,18 @@
       "svgo": ">=3.3.3",
       "@isaacs/brace-expansion": ">=5.0.1",
       "@modelcontextprotocol/sdk": ">=1.26.0",
-      "immutable": ">=5.1.5",
-      "rollup": ">=4.59.0",
-      "brace-expansion": ">=2.0.3",
-      "ajv": ">=8.18.0",
+      "immutable@>=5.0.0 <5.1.5": ">=5.1.5",
+      "rollup@>=4.0.0 <4.59.0": ">=4.59.0",
+      "brace-expansion@>=2.0.0 <2.0.3": ">=2.0.3",
+      "ajv@>=8.0.0 <8.18.0": ">=8.18.0",
       "bn.js": ">=5.2.3",
-      "picomatch": ">=4.0.4",
+      "picomatch@>=4.0.0 <4.0.4": ">=4.0.4",
       "js-yaml": ">=4.1.1",
       "jsondiffpatch": ">=0.7.2",
-      "yaml": ">=2.8.3",
+      "yaml@>=2.0.0 <2.8.3": ">=2.8.3",
       "zod": ">=3.22.3",
       "cookie": ">=0.7.0",
-      "diff": ">=8.0.3",
+      "diff@>=8.0.0 <8.0.3": ">=8.0.3",
       "qs": ">=6.14.2",
       "@octokit/plugin-paginate-rest": ">=9.2.2",
       "@octokit/request": ">=8.4.1",