…11 (aws#1529)

## P0 Fix: npm ci fails on npm 11 with [email protected]

Fixes aws/aws-cdk#37870

### Problem

`npm ci` fails on npm 11 with `Missing: [email protected] from lock file`
when using [email protected]. The root cause is that
`@aws-cdk/cloud-assembly-api` declares `jsonschema: "~1.4.1"` in its
dependencies, but aws-cdk-lib bundles `[email protected]` at the top
level. The tilde range `~1.4.1` excludes 1.5.0, so npm 11's stricter
lock file validation rejects the mismatch.

### Fix

Widen the range from `~1.4.1` to `^1.5.0`. The original tilde pin was
introduced in PR aws#61 to work around `[email protected]` being
incompatible with Node < 18.17. Since CDK has dropped Node 18 support
entirely, this constraint no longer applies.

### Context

- Rico noted in aws/aws-cdk#37717 that
unbundling `cloud-assembly-api` is not viable because it's not a jsii
module. PR #37721 (community attempt at unbundling) confirmed this with
build failures.
- This was identified as the other viable fix option: widen the range at
the source in this repo.
- Original pin reason (PR aws#61): `[email protected]` uses URL APIs
incompatible with Node < 18.17. No longer relevant.

### Related

- P0 issue: aws/aws-cdk#37870
- Rico's bundled-dep strip fix:
aws/aws-cdk#37726
- Momo's cloud-assembly-api bump (introduced the conflict):
aws/aws-cdk#37774
- Original Node compat pin: aws#61

---
By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache-2.0 license

---------

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>