FWIW:
The problem didn’t arise until we added the extension (which holds no package.json)
The problem goes away if we change yarn install in our Dockerfile to yarn install --production=false.
The problem also goes away if we change:
const DataLoader = require('dataloader');
to:
const DataLoader = require('strapi-plugin-graphql/node_modules/dataloader');
… in our extension.