fix(ext/node): emit DEP0198 warning for SHAKE digests without outputLength (#32521)

## Summary

- Emit `DeprecationWarning` (DEP0198) when creating SHAKE128/256 digests
without an explicit `options.outputLength`, matching Node.js behavior
with `--pending-deprecation`
- Enables `test-crypto-default-shake-lengths.js` and
`test-crypto-default-shake-lengths-oneshot.js` in node_compat

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: bartlomieju

ext/node/polyfills/internal/crypto/hash.ts

@@ -43,6 +43,7 @@ import {
   NodeError,
 } from "ext:deno_node/internal/errors.ts";
 import LazyTransform from "ext:deno_node/internal/streams/lazy_transform.js";
+import process from "node:process";
 import {
   getDefaultEncoding,
   getHashBlockSize,
@@ -80,10 +81,24 @@ export function Hash(
     validateUint32(xofLen, "options.outputLength");
   }
 
+  const algoLower = isCopy ? undefined : algorithm.toLowerCase();
+
+  if (
+    !isCopy && xofLen === undefined &&
+    (algoLower === "shake128" ||
+      algoLower === "shake256")
+  ) {
+    process.emitWarning(
+      "Creating SHAKE128/256 digests without an explicit options.outputLength is deprecated.",
+      "DeprecationWarning",
+      "DEP0198",
+    );
+  }
+
   try {
     this[kHandle] = isCopy
       ? op_node_hash_clone(algorithm, xofLen)
-      : op_node_create_hash(algorithm.toLowerCase(), xofLen);
+      : op_node_create_hash(algoLower, xofLen);
   } catch (err) {
     // TODO(lucacasonato): don't do this
     if (err.message === "Output length mismatch for non-extendable algorithm") {

tests/node_compat/config.jsonc

@@ -256,6 +256,8 @@
       "exitCode": 1,
       "output": "[WILDCARD]Unknown cipher id-aes128-wrap[WILDCARD]"
     },
+    "parallel/test-crypto-default-shake-lengths.js": {},
+    "parallel/test-crypto-default-shake-lengths-oneshot.js": {},
     "parallel/test-crypto-dh-constructor.js": {},
     "parallel/test-crypto-dh-leak.js": {},
     "parallel/test-crypto-dh-odd-key.js": {},