Ensure extension updates follow semver

[lilyjma]

The SQL extension did a major version upgrade from SQL v2 to v3. This was a breaking change, and they were unaware of the fact that bundles need to follow semver so they merged the change have the new extension as part of bundles v4 (when it needs to be in bundles v5). Fortunately this was caught before the next release of bundles v4, which prevented breaking existing apps using the SQL extension.

We need to:

• Have checks in place to ensure changes like this cannot be merged
• Ensure extension teams are aware about semver requirement and establish a cadence for releasing new major bundle version so breaking changes can be released
• validation of dependencies, including transitive dependencies