`@remotion/renderer`: Import vendored yauzl via relative path

Drop yauzl from package.json dependencies; import from vendor/yauzl-patched
directly and declare pend/buffer-crc32 as runtime deps for the vendored code.

Co-authored-by: Cursor <cursoragent@cursor.com>