package: fixate loopback-workspace version

Use a commit id instead of 3.0 as the version to use. This prevents
`npm install` from pulling backwards-incompatible changes that are
coming to the 3.0 branch.