unpin react-sdk & js-sdk deps after release

[ara4n]

or only pin them on the release branch. eitherway, dev should dep on dev, not releases, so npm run start works correctly without faffing with npm run link

[jryans]

We now do this as part of the release process (though it's a manual step at the moment).

[turt2live]

in practice we forget that step almost every time in recent versions.

[jryans]

Sounds like we should add it to the release script then.