fix: always inject dependencies from other subspaces

[g-chao]

Summary

Fix a issue in alwaysInjectDependenciesFromOtherSubspaces logic.

Before, we check the injected settings in the package.json to tell if a dependency is injected or not. However, in alwaysInjectDependenciesFromOtherSubspaces case, user no need to set injected settings in package.json for these dependencies. So this check logic is no longer accurate. It will lead a issue that pnpm-sync.json is not generated for these dependencies.

So, now, we check the version representation in pnpm-lock.yaml to see if it is started with file:, if yes, then it is a injected dependency.