Commit stub SDK manifest so Dependabot can resolve the file: dependency (#142)

Dependabot's npm updater fetches manifests directly from git and aborts on
every run because package.json declares
"@pulumi/googleworkspace": "file:sdks/googleworkspace" while sdks/ is
gitignored and only materialized by `pulumi install`.

Keep the generated SDK sources ignored, but commit
sdks/googleworkspace/package.json (name/version/dependencies matching the
existing package-lock.json entry) so the path dependency resolves from the
git tree. `pulumi install` removes and regenerates the whole SDK directory
before npm ci in CI, so CI behavior is unchanged.

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Den Delimarsky <53200638+localden@users.noreply.github.com>

.gitignore

@@ -8,7 +8,13 @@ devenv.lock
 # Pulumi
 .pulumi/
 Pulumi.*.yaml.bak
-sdks
+# Generated SDKs stay ignored, but keep the stub manifest so Dependabot can
+# resolve the file: dependency (nested negations are required: git cannot
+# re-include a file whose parent directory is excluded)
+sdks/*
+!sdks/googleworkspace/
+sdks/googleworkspace/*
+!sdks/googleworkspace/package.json
 
 # Secrets
 passphrase.prod.txt

sdks/googleworkspace/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "@pulumi/googleworkspace",
+  "version": "0.7.0",
+  "description": "Stub manifest for the @pulumi/googleworkspace SDK, committed so Dependabot can resolve the file: dependency. The full SDK is generated in place by `pulumi install` (see Pulumi.yaml).",
+  "dependencies": {
+    "@pulumi/pulumi": "^3.142.0",
+    "@types/node": "^18",
+    "async-mutex": "^0.5.0",
+    "typescript": "^4.3.5"
+  }
+}