build: pin transitive deps to keep Node 14 CI green

Regenerating the lockfile for the @percy/cli ^1.32.0 bump re-resolved several
loose transitive ranges to latest versions that dropped Node 14/16 support,
breaking the Node 14 CI leg on install (engine-strict):

- image-size 1.2.1 (node>=16)        via @percy/cli-upload "^1.0.0"
- node-releases 2.0.47 (node>=18)    via nyc -> babel -> browserslist
- snyk-nodejs-lockfile-parser 2.7.1 (node>=18) via @percy/cli-command, which
  also pulled @yarnpkg/core@4 + tar@7 (all node>=18)

Pin each back to its last Node-14-compatible line via resolutions. Downgrading
snyk-nodejs-lockfile-parser to 1.59.0 also drops the entire @yarnpkg/tar@7
subtree. Temporary workaround pending upstream CLI fix (percy/cli#2301);
remove once this SDK moves to a CLI release that supports Node 14 cleanly.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: rishigupta1599

package.json

@@ -29,7 +29,9 @@
     "@percy/sdk-utils": "^1.32.0"
   },
   "resolutions": {
-    "image-size": "~1.0.2"
+    "image-size": "~1.0.2",
+    "snyk-nodejs-lockfile-parser": "1.59.0",
+    "node-releases": "2.0.19"
   },
   "peerDependencies": {
     "puppeteer": ">=1"