fix: add version resolution for polkadot deps

[arvind-bg]

Ticket: WIN-9015

Summary

Fixes multiple versions of Polkadot packages causing warnings in BitGo Express startup

Problem

When starting BitGo Express, the application logged multiple warnings about duplicate Polkadot package versions:

@polkadot/util has multiple versions, ensure that there is only one installed.
Either remove and explicitly install matching versions or dedupe using your package manager.
The following conflicting packages were found:
    cjs 13.3.1    node_modules/@polkadot/util/cjs
    cjs 13.5.6    node_modules/@polkadot/util/cjs

@polkadot/util-crypto has multiple versions...
@polkadot/keyring has multiple versions...

These warnings repeated multiple times during startup, cluttering the logs.

Root Cause

The monorepo had conflicting Polkadot package versions:

• Root workspace: Uses @polkadot/[email protected] which depends on Polkadot packages v13.5.6
• Three substrate-related modules had explicit dependencies on v13.3.1:
  • @bitgo/abstract-substrate
  • @bitgo/sdk-coin-dot
  • @bitgo/sdk-coin-polyx

Yarn's dependency resolution installed both versions to satisfy all requirements, leading to duplicate packages in node_modules.

Solution

Applied Yarn resolutions to enforce a single version across the entire workspace:

1. Added resolutions in root package.json:

   • @polkadot/util: "13.5.6"
   • @polkadot/util-crypto: "13.5.6"
   • @polkadot/keyring: "13.5.6"

2. Updated module package.json files to align with resolved version:

   • Changed @polkadot/util, @polkadot/util-crypto, and @polkadot/keyring from 13.3.1 → 13.5.6 in:
     • modules/abstract-substrate/package.json
     • modules/sdk-coin-dot/package.json
     • modules/sdk-coin-polyx/package.json

Impact

• ✅ Cleaner startup logs
• ✅ Eliminates duplicate package warnings
• ✅ Improves consistency across the monorepo
• ✅ Aligns all Substrate-related packages with the same Polkadot version

Testing

Verified resolution with:

yarn why @polkadot/util
yarn why @polkadot/util-crypto  
yarn why @polkadot/keyring

All three commands now return only one version (13.5.6).