release: package-lock follows the alpha.3 bump

It carries the version in two places of its own, so the three files the
release commit touches are really four.

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "soulstream",
-  "version": "0.1.0-alpha.1",
+  "version": "0.1.0-alpha.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "soulstream",
-      "version": "0.1.0-alpha.1",
+      "version": "0.1.0-alpha.3",
       "license": "ISC",
       "dependencies": {
         "@tauri-apps/api": "^2"