consider doing runtime checks on dep versions to stop people trying to run riot-web against stale react-sdk or js-sdk etc

[ara4n]

[t3chguy]

This provides very little value, forks can have different versioning numbers, and also if we don't also have runtime version checks for all our dependencies it becomes mostly moot. yarn.lock works fine.