Switch to `yarn` which supports overriding resolutions to address vulnerabilities in dependencies of dependencies (#3242)
* Switch to `yarn` which supports overriding resolutions to address vulnerabilities in dependencies of dependencies
* Go back to npm and use `overrides`