publish Yarn Classic toolchain

Always use Yarn Classic 1.22.22, managed through Volta and pinned in package.json; never use npm in the Sentry Publish repository. Chose the pinned Yarn toolchain over interchangeable package managers because commands, lockfile behavior, and CI are standardized on Yarn.