package_managers: yarn: _resolve_package: Initialize 'name' & 'version'

Although impossible (with the assert_never sink) CodeQL still reports
them as potentially being uninitialized.

Resolves: https://github.com/containerbuildsystem/cachi2/security/code-scanning/170
Resolves: https://github.com/containerbuildsystem/cachi2/security/code-scanning/169

Signed-off-by: Erik Skultety <eskultet@redhat.com>

cachi2/core/package_managers/yarn/resolver.py

@@ -285,6 +285,8 @@ def log_for_locator(msg: str, *args: Any, level: int = logging.DEBUG) -> None:
 
         locator = package.parsed_locator
         checksum = package.checksum
+        name = None
+        version = None
 
         if isinstance(locator, NpmLocator):
             # npm dependencies have reliable names and versions in yarn info output