chore: add enough information to make package builds cacheable (aws#14341)

Enhance our `package.json`s with enough information to make hermetic, cacheable builds possible. Mostly consists of:

* Adding missing `@types/*` packages to `devDepencendies` everywhere. Those dependencies were always required but undeclared.
* Add `nozem.ostools` to various packages to indicate the non-hermetic binaries these scripts depend on.
* Add `/// !cdk-integ pragma:ignore-assets` to all integ tests that use assets.
* Fix some `.gitignores` that were ignoring files that were already committed inside git.
* Update `pkglint` to not be reliant on its *own* location inside the monorepo, but instead search upwards for the monorepo root from the package it's checking.

To give this a shot yourself, run:

```
$ npx nozem
```


This is a revival of aws#10039, which is now obsolete.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: rix0rrr

.gitignore

@@ -42,5 +42,6 @@ yarn-error.log
 
 # Cloud9
 .c9
+.nzm-*
 
 /.versionrc.json

package.json

@@ -40,6 +40,19 @@
     "name": "Amazon Web Services",
     "url": "https://aws.amazon.com"
   },
+  "nozem": {
+    "$comment": [
+      "these files are read by pkglint and cdk-build-tools tests for almost every package.",
+      "Rather than add them to each package.json individually, do it globally here."
+    ],
+    "globalNonPackageFiles": [
+      "package.json",
+      "release.json",
+      "scripts/resolve-version.js",
+      "scripts/resolve-version-lib.js",
+      "version.v1.json"
+    ]
+  },
   "workspaces": {
     "packages": [
       "packages/*",