More bolt project validations

[lukebatchelor]

Some more checks we should perform

• peerDeps and devDeps are the same version range (I think this will be a requirement for internal deps only?)
• internal deps can only have caret, tilde and pinned version ranges (but can be anything that semver.satisifies the current version)

[jamiebuilds]

The fear I have going down this route is that it's going to get increasingly difficult to explain why certain version ranges are allowed and others are not

[lukebatchelor]

Not sure what you mean @thejameskyle ? Are you referring to the first point? I think that ones still up for discussion.

The second is just a product of requirements though and is already implemented, this would just be moving those checks from getDependencyGraph into validateProject.