(build) Add yarn npm audit workflow

[st3phhays]

Description Of Changes

This adds a workflow to run yarn npm audit on
every pull request to ensure we do not introduce
security vulnerabilities.

Motivation and Context

This is another step to ensure we do not release security vuilnerabilities.

Testing

See this failed workflow: https://github.com/chocolatey/choco-theme/actions/runs/8898008295/job/24434208562?pr=397

A package was purposefully downgraded to show how it would report vulnerabilities.

Operating Systems Testing

n/a

Change Types Made

• Bug fix (non-breaking change).
• Feature / Enhancement (non-breaking change).
• Breaking change (fix or feature that could cause existing functionality to change).
• Documentation changes.
• PowerShell code changes.

Change Checklist

• Requires a change to the documentation.
• Documentation has been updated.
• Tests to cover my changes, have been added.
• All new and existing tests passed?
• PowerShell code changes: PowerShell v2 compatibility checked?

Related Issue

TBD

[st3phhays]

This is in draft because I want to figure out what happens in this workflow if warnings are found. I want it to report them, and fail this action.

[st3phhays]

See this run for an example of how it would report if there are vulnerabilities. It will fail if there are moderate or severe vulnerabilities.

https://github.com/chocolatey/choco-theme/actions/runs/8898008295/job/24434208562?pr=397

[corbob]

Thanks for getting this added @st3phhays 👍