Keep peer ranges in sync and dedupe Yarn package updates

[woksin]

Fixed

• Repositories using the shared update-packages workflow now advance caret and tilde peer ranges that exactly track local pinned dependency versions when the new pin stays within the existing range; out-of-range updates leave the peer unchanged with a warning. (update-packages: ncu bump forks Yarn transitive resolutions and leaves peer ranges behind #110)
• Repositories using Yarn 2.2+ now run yarn dedupe after package updates to consolidate compatible transitive resolutions. (update-packages: ncu bump forks Yarn transitive resolutions and leaves peer ranges behind #110)

[woksin]

Local checks passed on follow-up commit e4d925722884090bc661103e2be6666456ce3670:

• python3 -B .github/scripts/tests/update-packages.test.py — 76 tests passed; the initial 120-second attempt timed out, and the bounded 300-second rerun completed in 156 seconds.
• python3 -B .github/scripts/tests/sync-package-update-peers.test.py — 26 tests passed, including symlinked parents, skipped-match notices, annotation escaping, and continued refusal of symlinked manifests. The update suite also enforces byte equality of the embedded helper and standalone script.
• python3 -B .github/scripts/tests/actions-usage-report.test.py — 34 tests passed.
• python3 -B .github/scripts/tests/bootstrap-package-update-safety.test.py — 5 tests passed.
• python3 -B .github/scripts/tests/bootstrap-schedules.test.py — 3 tests passed.
• python3 -B .github/scripts/tests/cleanup-pr-artifacts.test.py — 35 tests passed.
• node --test .github/scripts/tests/verify-release-intent.spec.mjs — 10 tests passed.
• node --test .github/scripts/tests/verify-release-notes.spec.mjs — 63 tests passed.
• node --check .github/scripts/update-ai-profile-subscription.mjs and node --test .github/scripts/update-ai-profile-subscription*.spec.mjs — syntax check and 18 tests passed.
• actionlint .github/workflows/update-packages.yml and actionlint .github/workflows/verify-package-updates.yml — passed.
• git diff --check — passed. Fetch/rebase confirmed the branch was already up to date.

These are the repository's native script gates; there is no application solution/build or separate integration lane. Local execution used macOS and Node 26.8.1. CI's Ubuntu environment and Node 22/24 configurations are CI-only because those Node versions are not installed locally. No live dependency-update or organization-wide write workflow was invoked.

Release intent is no-release: Workflows has no releases or tags, generated callers reference its workflows at @main, and the publish template only handles Source/** changes or explicit manual dispatch, not this change.

The cross-provider review workflow (Opus 5.5 + GPT-6 Astra) passed on the pre-follow-up diff (round 4), with the confirmed minor finding addressed by e4d9257. The orchestrator will verify that follow-up before creating merge-ok. Merge remains blocked pending that authorization.