QVAC-24108 chore: enforce inference's peer dependencies in SDK

[arun-mani-j]

🎯 What problem does this PR solve?

• Addon version ranges are declared in three fields that must stay identical: @qvac/inference peerDependencies (optional peers), @qvac/inference devDependencies, and @qvac/sdk dependencies. Optional peers do not install transitively, so the SDK hard-depends on the same addons; inference mirrors them into devDependencies to build and test against them.
• Nothing enforces that the three agree. A bump is a hand-edit in all three fields, and drift is silent.

📝 How does it solve it?

• @qvac/inference peerDependencies is the single source of truth for addon ranges.
• packages/sdk/scripts/check-addon-ranges.ts fails when any addon's range in @qvac/sdk dependencies or @qvac/inference devDependencies differs from the peer. It reports one line per addon and is silent on success. Example:

@qvac/tts-ggml: inference has it as ^0.7.4 in optional peerDependencies, but SDK has ^0.7.5.

Please ensure the SDK dependencies and inference devDependencies use the same addon versions as inference's peerDependencies.

• The check is chained into the SDK lint gate (npm run check:addon-ranges), so pr-checks-sdk-pod runs it; the pod config's depends_on: packages/inference runs it on inference-only PRs too.
• The check imports the two package.json files directly and has no dependencies.

🧪 How was it tested?

• Aligned repo state passes with no output.
• Injected drift fails: an SDK-vs-peer version mismatch, and an addon present in peerDependencies but absent from the mirrors.
• lint (eslint + the check), typecheck, format, and the full pr-checks-sdk-pod gate pass.

[github-actions]

Review Status

Current Status: ✅ APPROVED
Approvals so far: Team Lead: 1, Member: 1

[github-actions]

License compliance — clean

No new dependency license findings in this PR.

Warn-only (shadow) mode — this check does not block merges yet.

Updated automatically by the canonical license compliance workflow.

NOTICE presence (advisory)

Missing NOTICE (advisory, does not block):

• ./.github/actions/release-merge-guard
• ./docs/website
• ./packages/ggml-coload-smoke
• ./packages/fabric/test/integration
• ./packages/inference-addon-cpp/mobile
• ./packages/sdk/e2e
• ./packages/llm-llamacpp/benchmarks/performance
• ./packages/llm-llamacpp/benchmarks/server
• ./packages/vla-ggml/sim/server
• ./packages/embed-llamacpp/benchmarks/performance
• ./packages/embed-llamacpp/benchmarks/server
• ./packages/asr-ggml/benchmarks/server