package: fixate loopback-workspace version

Use a commit id instead of 3.0 as the version to use. This prevents
`npm install` from pulling backwards-incompatible changes that are
coming to the 3.0 branch.
Merge pull request #13 from strongloop/feature/fixate-workspace-version

package: fixate loopback-workspace version