lib-jitsi-meet does not bundle xmldom anyway, and we are providing it
here. strophe seems to be stuck in a slightly old version which creates
spurious security warnings.

Also enable using legacy peer dependencies until we update RN.

adds a .npmrc file to create/update the package-lock.json file regardless
of a developers local settings.