fix(instrumentation-aws-lambda): add 'lint:semconv-deps'

[trentm]

This adds a lint step that checks that packages in the workspace
are following our 'rule' that uses of the semconv pkg 'incubating'
entry-point should pin the '@opentelemetry/semantic-conventions'
dep. This is because (though rare) the incubating/unstable
semconv exports can have breaking changes in minors.

Refs: #2549 (comment)
Refs: open-telemetry/opentelemetry-js#5182

---

That "rule" (to pin the semconv package dep when using the incubating entry-point) is the concensus from discussion on open-telemetry/opentelemetry-js#5182
I'm proposing this extra lint step (added to npm run lint) that will help check that this rule is followed.

[trentm]

Currently there is one package that is breaking this rule:

% npm run lint:semconv-deps

> [email protected] lint:semconv-deps
> ./scripts/lint-semconv-deps.mjs

lint-semconv-deps error: package @opentelemetry/instrumentation-aws-lambda (in plugins/node/opentelemetry-instrumentation-aws-lambda) imports "@opentelemetry/semantic-conventions/incubating" but does not *pin* the dependency: `"@opentelemetry/semantic-conventions": "^1.27.0"`

% echo $?
1

I'll update that dep in a commit on this PR.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 90.75%. Comparing base (8bfa21f) to head (7d9a8c2).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2569   +/-   ##
=======================================
  Coverage   90.75%   90.75%           
=======================================
  Files         169      169           
  Lines        8018     8018           
  Branches     1632     1632           
=======================================
  Hits         7277     7277           
  Misses        741      741           

[trivikr]

Should instrumentation-aws-lambda be removed from commit message since the script is global?

[trentm]

Should instrumentation-aws-lambda be removed from commit message since the script is global?

This includes a change to instrumentation-aws-lambda's package.json#dependencies for which there should be a new version of this package, so I think it should stay. IIRC keeping it in the commit title is what gets the release process to notice that there should be a new version of this package.

[jj22ee]

Approving update to instrumentation-aws-lambda's package.json.

[trentm]

Given the decision here: open-telemetry/opentelemetry-js#5182 (comment)
(and the coming docs for that: open-telemetry/opentelemetry-js#5256), I'll be changing this PR so that the linting breaks if the semconv 'incubating' is used at all in runtime code.