Add npm run ava command, update instructions, and exclude files from VSCode search
#7350
mbg__upload-ref-sha-input.yml
on: pull_request
Matrix: Upload-sarif: 'ref' and 'sha' from inputs