Pin deps for installation

[laurentsimon]

check last post on https://stackoverflow.com/questions/58482655/what-is-the-closest-to-npm-ci-in-yarn

seems yarn install --immutable --immutable-cache --check-cache according to https://yarnpkg.com/cli/install

I've not looked further