chore: migrate to Yarn 4.13 and npm policy

[manelgracia]

Security Follow-up: Yarn 4 migration and dependency hardening

This PR is part of the security follow-up to the axios supply chain attack incident:
https://app.incident.io/payfit/incidents/1562?tab=overview

For security reasons, this PR is scheduled to be merged on Monday, 20th of April.

Reviewer action required

Please follow this decision flow:

1. Check whether this repository can be archived
   • If yes: close this PR and archive the repository.
2. If the repository must stay active:
   • Review this PR and merge it yourself.
   • Please pay special attention to any repository-specific flows that might break and are not fully covered by this PR.

Tracking (mandatory)

After your decision/action, please update this spreadsheet:
https://docs.google.com/spreadsheets/d/1Oof2kU6ufydjPt8PzBsw5NC63zSs6IvAeG-vDdMNwIE/edit?usp=sharing

Important context

We cannot guarantee this PR works 100% in every repository.
We had to update around 50 repositories in a very short timeframe due to the security urgency.

[coderabbitai]

Warning

Rate limit exceeded

@manelgracia has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 7 minutes and 14 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 7 minutes and 14 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: e2156d67-f1aa-4c98-a052-3729ac338856

📥 Commits

Reviewing files that changed from the base of the PR and between 26ffcd9 and 45d964a.

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (5)

• .github/workflows/build-deploy.yml
• .gitignore
• .prettierignore
• .yarnrc.yml
• package.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/yarn-4.13-and-npm-policy

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}