chore(licenses): read dependencies directly from lockfiles (#9540)

Spawning Yarn and npm makes the license check pay their startup and dependency-tree construction costs on every lint run. Reading Yarn, npm, and Bun lockfiles directly reduced the representative end-to-end check from 285.8 ms to 32.1 ms.

Author: BridgeAR

package.json

@@ -199,6 +199,7 @@
     "@types/node": "^18.19.106",
     "@types/sinon": "^22.0.0",
     "@vercel/nft": "^1.10.2",
+    "@yarnpkg/lockfile": "^1.1.0",
     "axios": "^1.18.1",
     "benchmark": "^2.1.4",
     "body-parser": "^2.3.0",
@@ -221,6 +222,7 @@
     "husky": "^9.1.7",
     "istanbul-lib-report": "^3.0.0",
     "istanbul-reports": "^3.0.2",
+    "jsonc-parser": "^3.3.1",
     "jszip": "^3.10.1",
     "minimatch": "^10.2.5",
     "mocha": "^11.7.6",