Upgrade Yarn to 4.17.1

[wborn]

Notable changes include:

• Dependency lifecycle scripts are now disabled by default (enableScripts: false), with support for explicitly approved Git repositories.
• npmMinimalAgeGate now defaults to one day and can be configured per npm scope.
• Added staged npm publishing through yarn npm stage.
• Improved upgrade-interactive, yarn why, environment-variable expansion, workspace execution ordering, and npm auditing of patched packages.
• Improved installation performance by caching the node_modules install state across workspaces.
• Added configurable pnpm installation concurrency and editor SDK support for Oxlint and Oxfmt.
• Added package-map generation support.
• Fixed various PnP compatibility issues with newer Node.js versions, Unicode patch paths, watch mode, OIDC publishing, and TypeScript 7 compatibility patches.