fix: explicitly install packages with --save-prefix=^ (#10980)

This will make sure that npm packages we install for kits can accept
any non-major version update.