package: Downgrade to zip.js 2.2.27 and pin version

zip.js 2.3.19 and/or its Pako worker crashes the Chrome tab when
unpacking product.img from Pixel 6 factory images:
   macOS: Error code: 5
   Linux: Error code: SIGILL
   Windows: Error code: Out of memory

Downgrade to our last known working version of zip.js, 2.2.27, and pin
it until we have a better solution. We can report the issue and upgrade
later once it's fixed.