[SVLS-8827] add npm minimal age gate

[ava-silver]

What does this PR do?

Adds npmMinimalAgeGate: "2d" to .yarnrc.yml, configuring Yarn Berry to refuse NPM packages published less than 2 days ago during lockfile generation. This acts as a supply chain attack cooldown mechanism.

Motivation

Following the supply chain attack on axios earlier this year (incident-51987), this is a config-only security hardening. Supersedes #685 (fork PR that can't run integration tests).

What changed?

• .yarnrc.yml: added npmMinimalAgeGate: "2d"

No lockfile changes. No functional impact.

Testing

• yarn install completes with no errors and no lockfile diff

[ava-silver]

• [SVLS-8827] add npm minimal age gate #688 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.69%. Comparing base (daad3fe) to head (9f4ad07).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #688   +/-   ##
=======================================
  Coverage   77.69%   77.69%           
=======================================
  Files          12       12           
  Lines        1112     1112           
  Branches      350      350           
=======================================
  Hits          864      864           
  Misses        118      118           
  Partials      130      130           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.