fix(core): pin yargs to v17 for CJS CLI compatibility

yargs v18 is ESM-only and requires require()-of-ESM support, which
only shipped unflagged in Node 20.19 / 22.12.  Since the jazzer CLI
entry point must remain loadable via require() on Node >= 20.6, pin
yargs to the v17 line.

Author: oetr