Fix npm bzlmod (#8506)

* Restrict visibility of exported file

* Align npm_translate_lock attrs

* Remove defs_bzl_filename attr

* Align root_package with pnpm-lock.yaml location

Use a symlink to avoid copying the file.

reflection/BUILD.bazel

@@ -10,7 +10,7 @@ filegroup(
 # flatbuffer_ts_library() only supports .fbs file but not filegroups
 exports_files(
     srcs = ["reflection.fbs"],
-    visibility = ["//visibility:public"],
+    visibility = ["//reflection/ts:__pkg__"],
 )
 
 filegroup(