Preserve the SHA-224 hash of `packageManager`

[hyoban]

Clear and concise description of the problem

https://github.com/nodejs/corepack#when-authoring-packages

packageManager can be something like yarn@3.2.3+sha224.953c8233f7a92884eee2de69a1b92d1f2ec1655e66d08071ba9a02fa

The SHA-224 hash part is removed after the update.

Suggested solution

Update the SHA-224 hash part correctly.

Alternative

No response

Additional context

I would be happy to submit a PR for this.

Validations

• Follow our Code of Conduct
• Read the Contributing Guide.
• Check that there isn't already an issue that request the same feature to avoid creating a duplicate.

[antfu]

I don't know if we will have the sha in the metadata, feel free to give a try and send PR if you got a solution