fix(deps): replace archiver with yazl

[dnwlf]

Related issue

Fixes #94

Description

This PR replaces CDKTN's dependency on archiver which includes a dependency on a version of lodash vulnerable to CVE-2026-4800, with a dependency on yazl, which looks to be a small stable package with minimal dependencies. Not sure if this will be considered a pro or a con, but VS Code has a dependency on it.

Checklist

• I have updated the PR title to match CDKTN's style guide
• I have run the linter on my code locally
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation if applicable
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works if applicable
• New and existing unit tests pass locally with my changes

[jsteinich]

@dnwlf I'm seeing at least 2 current test failures:

1. Integration test setup. Probably just need to update test/yarn.lock, but could definitely be further failures.
2. Provider integration test babel. This could be a problem with the central config, or perhaps we'll need to update test setups. As that could translate into breaking changes for end users, we'll want to investigate further.