Add Yandex Cloud Service Account authentication provider

- New package @ydbjs/auth-yandex-cloud for Service Account key authentication
- Supports JWT creation with PS256 algorithm and IAM token exchange
- Automatic token caching and background refresh before expiration
- Built-in retry logic with exponential backoff for IAM API calls
- Multiple initialization methods: fromFile, fromEnv, or direct JSON object
- Add esbuild override to fix security vulnerability in dev dependencies
- Update Changesets config to exclude third-parties from fixed versioning
- Update AGENTS.md with rules for third-parties packages

Author: polRk

.changeset/add-yandex-cloud-auth.md

@@ -0,0 +1,11 @@
+---
+"@ydbjs/auth-yandex-cloud": minor
+---
+
+Add Yandex Cloud Service Account authentication provider
+
+- New package `@ydbjs/auth-yandex-cloud` for authenticating with Yandex Cloud Service Account authorized keys
+- Supports JWT creation with PS256 algorithm
+- Automatic IAM token management with caching and background refresh
+- Built-in retry logic with exponential backoff for IAM API calls
+- Multiple initialization methods: from file, environment variable, or JSON object

.changeset/config.json

@@ -4,7 +4,16 @@
 	"commit": false,
 	"fixed": [
 		[
-			"@ydbjs/*"
+			"@ydbjs/abortable",
+			"@ydbjs/api",
+			"@ydbjs/auth",
+			"@ydbjs/core",
+			"@ydbjs/debug",
+			"@ydbjs/error",
+			"@ydbjs/query",
+			"@ydbjs/retry",
+			"@ydbjs/topic",
+			"@ydbjs/value"
 		]
 	],
 	"linked": [],

AGENTS.md

@@ -475,6 +475,12 @@ Select affected packages, choose bump type (major/minor/patch), write user-facin
 - **MINOR:** Backwards-compatible features
 - **PATCH:** Bug fixes, docs, typings
 
+**Important Rules:**
+
+- **DO NOT create CHANGELOG.md files manually** - Changesets automatically generates them from changeset files in `.changeset/` directory
+- **If you create or delete packages in `packages/` directory** - Update the `fixed` array in `.changeset/config.json` to include new packages or remove deleted ones (packages must be listed alphabetically)
+- Third-parties packages (`third-parties/`) are NOT included in `fixed` array - they version independently
+
 See `RELEASING.md` and `VERSIONING.md` for full release process
 
 ---