ci: Add package.lock drift check CI step

Signed-off-by: Tomas Kislan <[email protected]>

Author: tkislan

.github/workflows/ci.yml

@@ -190,6 +190,30 @@ jobs:
       - name: Run spell check
         run: npm run spell-check
 
+  package-lock-drift-check:
+    name: Package Lock Drift Check
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Checkout
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
+        with:
+          cache: 'npm'
+          node-version-file: '.nvmrc'
+          registry-url: 'https://npm.pkg.github.com'
+          scope: '@deepnote'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Check package lock drift
+        run: |
+          git diff HEAD
+          test "$(git diff --name-only HEAD | wc -l | xargs)" -eq 0
+
   audit-prod:
     name: Audit - Production
     runs-on: ubuntu-latest