lockfiles for hak modules

### Your use case

#### What would you like to do?

have yarn.lock files for hak modules and their dependencies, at least as an optional possibility

#### Why would you like to do it?

stricter dependency tree, integrity for downloaded packages (`yarn --frozen-lockfile`!), ability to change the specific versions in cases like element-hq/element-web#32105

#### How would you like to achieve it?

ship the package.json and yarn.lock files in the repository, instead of generating just the package.json on the spot?

### Have you considered any alternatives?

_No response_

### Additional context

_No response_