We have openhands extensions as a dependency

"@openhands/extensions": "git+<https://github.com/OpenHands/extensions.git#7b33f64ffccf95f7ccd2ec640aeae84ab1cc2c75>",

is this expected? I thought we don't use it as a pinned dependency so that skills are auto updated and don't require cutting a release