Revert workflow files back to npm ci

CI workflow files should use npm ci for reproducible builds:
- package.yml (CD workflow)
- deps.yml (dependency checking)
- copilot-setup-steps.yml

Non-workflow files continue to use npm install:
- GitHub actions (npm-ci, build-vsix)
- Azure pipelines (stable, pre-release)
- Post-checkout git hook
- Devcontainer files

Author: devin-ai-integration[bot]

.github/workflows/copilot-setup-steps.yml

@@ -57,10 +57,10 @@ jobs:
           path: ./out
           key: ${{runner.os}}-${{env.CACHE_OUT_DIRECTORY}}-${{hashFiles('src/**')}}
 
-      # This is faster than running `npm install`, we do not want to build zmq, etc.
+      # This is faster than running `npm ci`, we do not want to build zmq, etc.
       # Let that happen in other jobs, this job needs to be fast
-      - name: npm install
-        run: npm install --ignore-scripts --prefer-offline --no-audit
+      - name: npm ci
+        run: npm ci --ignore-scripts --prefer-offline --no-audit
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 

.github/workflows/deps.yml

@@ -32,7 +32,7 @@ jobs:
           scope: '@deepnote'
 
       - name: Install dependencies
-        run: npm install --prefer-offline --no-audit
+        run: npm ci --prefer-offline --no-audit
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -63,7 +63,7 @@ jobs:
           cache: 'npm'
 
       - name: Install dependencies
-        run: npm install --prefer-offline --no-audit
+        run: npm ci --prefer-offline --no-audit
 
       - name: Run postinstall
         run: npm run postinstall

.github/workflows/package.yml

@@ -33,7 +33,7 @@ jobs:
           scope: '@deepnote'
 
       - name: Install dependencies
-        run: npm install --prefer-offline --no-audit
+        run: npm ci --prefer-offline --no-audit
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}