Add package-lock.json for reproducible builds

- Remove package-lock.json from .gitignore

- Update all CI workflows to use npm ci

- Commit lock file for all workspaces

Author: Scott Kurtzeborn

.github/workflows/deploy-functions.yml

@@ -24,7 +24,7 @@ jobs:
         run: |
           # Delete root package.json temporarily to break workspace link
           rm -f ../package.json
-          npm install
+          npm ci
 
       - name: Build TypeScript
         working-directory: ./functions
@@ -34,7 +34,7 @@ jobs:
         working-directory: ./functions
         run: |
           rm -rf node_modules
-          npm install --omit=dev
+          npm ci --omit=dev
 
       - name: Deploy to Azure Functions
         uses: Azure/functions-action@v1

.github/workflows/deploy-landing.yml

@@ -22,7 +22,7 @@ jobs:
 
       - name: Install dependencies
         working-directory: ./landing
-        run: npm install
+        run: npm ci
 
       - name: Build
         working-directory: ./landing

.github/workflows/deploy-web.yml

@@ -22,7 +22,7 @@ jobs:
 
       - name: Install dependencies
         working-directory: ./web
-        run: npm install
+        run: npm ci
 
       - name: Build
         working-directory: ./web

.github/workflows/deploy-worker.yml

@@ -22,7 +22,7 @@ jobs:
 
       - name: Install dependencies
         working-directory: ./workers
-        run: npm install
+        run: npm ci
 
       - name: Deploy to Cloudflare Workers
         uses: cloudflare/wrangler-action@v3

.github/workflows/test.yml

@@ -18,7 +18,7 @@ jobs:
           node-version: '20'
 
       - name: Install root dependencies
-        run: npm install
+        run: npm ci
 
       - name: Run linter
         run: npm run lint

.gitignore

@@ -1,6 +1,5 @@
 # Dependencies
 node_modules/
-package-lock.json
 
 # Environment variables
 .env