fix: Return resolved package names for aliases (#14061)
## Summary
- return npm alias targets from the lockfile entry's resolved package
name instead of the install alias
- recover Yarn Classic npm alias targets from alias descriptors,
including scoped targets
- add regression coverage for `lockfilePackages()` with npm and Yarn
Classic aliases
Co-authored-by: vercel-gh-bot-2[bot] <282331341+vercel-gh-bot-2[bot]@users.noreply.github.com>