build: CI fixes

[alenakhineika]

Experiments to see whether CI goes green.

• Flaky GC test MONGOSH-3505 (packages/cli-repl/src/cli-repl-gc.spec.ts) - retry the heap snapshot so a weak-handle release that spans two GC passes is not reported as a leak, plus a test that a genuine leak is still detected.

• Windows packaging (packages/build/src/packaging/package/zip.ts) - package_artifact_win32_x64 failed with spawn 7z ENOENT after the 7zip package was removed from the windows-2022-latest AMI DEVPROD-42642. Falls back to 7z.exe and the two standard 7-Zip install locations.

• Shrinkwrap generation (packages/build/src/npm-packages/generate-shrinkwrap.ts) - workspace-nested dependencies were resolved from the registry instead of the lockfile, pinning js-yaml@5.4.1 in the published shrinkwrap while CI tested 5.2.2. Re-keys those entries onto the new root and adds --offline so any future gap fails loudly. Also --no-audit, whose stalled request was timing out test_build MONGOSH-3641

• Avoid loading the deprecated domain module - Node removed the REPL's dependency on it in favour of _handleError (nodejs/node@a9da9ffc), but we patched both unconditionally, so require domain still emitted a DEP0032 runtime warning on Node 27 - polluting mongosh's output and failing test_e2e_node_nightly. Now uses _handleError alone where available, keeping the domain path for Node < 25.

• Dump the container logs before tearing the stack down, so that a failure is diagnosable (e.g. mongod not having started up in time).

• Fixes the Kerberos connectivity failures MONGOSH-3642