fix(eas): retry dependency downloads and filter asset imports

[creatix]

EAS releases can fail when npm temporarily rate-limits the dependency download, and native exports fail when the asset generator imports font documentation and license files.

This change gives npm five retries with exponential backoff and fewer simultaneous connections. The dependency declarations and lockfile remain unchanged. It also limits generated asset imports to Metro-supported extensions, preserving the existing density-variant and platform-video exclusions.

Validation:

• Clean npm ci --include=dev --ignore-scripts --no-audit --no-fund passed with the original registry dependency and lockfile (2,665 packages).
• npm's actual fetch implementation recovered from two simulated HTTP 429 responses using these settings; the third request succeeded after 60 seconds.
• Android and iOS Expo exports passed with the regenerated asset registry; font README and license files were excluded.
• Native fingerprint unchanged: c48ebb638198b55680473cc3280e4e698f0ad938.
• Targeted lint passed with two existing console-log warnings; formatting and diff checks passed.

This has not been merged or rerun on EAS. Retries allow transient rate limits to recover; persistent registry failures can still exhaust the retry limit.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Actions	Updated
solid-app	Ignored	Preview	Oct 7, 2026 4:21pm UTC
solid-app-staging	Ignored	Preview	Oct 7, 2026 4:21pm UTC

[claude]

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.