fix: stop Corepack prompting in the Renovate container

[cryptodev-2s]

Explanation

The first approved update on the Dependency Dashboard (#10300) produced no pull request. Renovate honoured the approval and got as far as building the branch, then the lockfile update failed:

ExecError: Command failed: yarn install --mode=update-lockfile
! Corepack is about to download https://repo.yarnpkg.com/4.17.1/packages/yarnpkg-cli/bin/yarn.js

Corepack asks for confirmation before downloading the Yarn version pinned in packageManager. Inside the Renovate container there is nothing to answer it, so the install exits 1 and the run ends with No files to commit, which is why no branch and no pull request appeared.

Everything before that worked. The debug log shows the approval being picked up correctly:

Branch is not pending, removing pending upgrades   (renovate/ts-jest-29.x-lockfile)
Branch needs creating

COREPACK_ENABLE_DOWNLOAD_PROMPT=0 is Corepack's own switch for this; its source reads the variable and treats 0 as "do not prompt".

References

Follows #10298. Part of WPC-1161.

Checklist

• I've updated the test suite for new or updated code as appropriate (workflow only)
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed (no published package is touched)
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Low Risk
CI-only workflow change with no impact on application code, auth, or published packages.

Overview
Renovate lockfile updates were failing in CI because Corepack prompts to download the Yarn version from packageManager, and the Renovate container has no way to confirm—yarn install --mode=update-lockfile exits and no PR gets created.

The Run Renovate step now sets COREPACK_ENABLE_DOWNLOAD_PROMPT=0 and passes it through the action via additional-env-list, so Corepack downloads Yarn without an interactive prompt.

^{Reviewed by Cursor Bugbot for commit 8cc066b. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 839e0a7. Configure here.}