Update src hash, npmDepsHash, and package-lock.json for v0.75.0. Fix preBuild substitute pattern to match new generate-image-models step.
Upstream v0.74.0 lockfile omits resolved/integrity metadata needed by buildNpmPackage's offline NPM cache. Add a package-local enriched lockfile, a script to regenerate it from the npm registry, and a prePatch step to copy it into the build sandbox.
