fix(deps): keep the lobehub packages out of the global store

The wxt dev server failed to start: esbuild could not resolve lodash-es
from @lobehub/icons, nor unist-util-visit from @lobehub/ui.

Both are phantom dependencies. Neither package declares the import it
makes, and neither is ours to fix. Under the previous layout they
resolved by walking up into the project tree; from a store path outside
the project there is nothing to walk up into.

trustedDependencies keeps a package project-local rather than shared, so
those two install as real directories again and their undeclared imports
resolve as before. Everything else still comes from the store.

Cost is node_modules going from 32M to 55M per checkout, against 2098M
before any of this.

Verified: both wxt apps build clean, 43.49 MB and 2.41 MB.

Author: DaniAkash