Depend on the fixed crypto stack, and let Lock Threads run again

@pezkuwi/util, util-crypto and x-fetch now require ^14.0.26, which brings
@pezkuwi/wasm-crypto 7.5.20 in place of 7.5.17. The lockfile moves with it.

axios moves to ^1.20.0 in resolutions, with the lockfile entries that the
Dependabot PR for it (#11) left out; without them `yarn install --immutable`
refused to run and every check on that PR failed.

Lock Threads has failed on every scheduled run: lock-threads v4 rejects a
github-token longer than 100 characters, and GitHub's tokens now are. v6.0.2
fixes the validation. Since v5 the action also locks discussions by default;
process-only keeps it to issues and pull requests, as before and as the job's
permissions allow.

package.json

@@ -45,7 +45,7 @@
     "@types/node": "^22.10.5"
   },
   "resolutions": {
-    "axios": "^1.13.5",
+    "axios": "^1.20.0",
     "semver": "^7.5.2",
     "typescript": "^5.5.4"
   }