Fail
Have the build fail if it detects that a yarn.lock update is requested.
This should give the user a chance to manually inspect their yarn.lock file / update it with a command like ./gradlew kotlinUpgradeYarnLock.
This strategy will require quitting Kobweb immediately to address it, which may not be clear to new users, which is why it's not chosen as the default. However, if someone knows what they're doing, setting the strategy to fail is technically the safest option.
Parameters
If set to true, this means reject not only yarn.lock being changed, but for yarn.lock being created in the first place. Usually this level of strictness isn't required, but project authors can include it if they want to verify that new users are getting a yarn.lock file that they already committed into source control.