Review npx usages

[caugner]

We should ensure that all npx usages are unambiguous:

1. Either they refer to a package in our dependencies.
2. Or they refer to a binary provided by a package in our dependencies, and specify that dependency via the --package option.