Upgrade markdownlint-cli2 to 0.23.3

Replace its pinned js-yaml 5.2.2 dependency with patched 5.4.1.
The September 20 release meets the 14-day minimum release age.

Together with the direct js-yaml update, this removes all copies
in the affected 5.0.0 through 5.4.0 range from the lockfile.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 324aab52-a07d-4fdd-88e5-508d28dbc858

Author: cklin