chore: harden npm install (ignore-scripts + age gate) #554

Job	Run time
get latest tag	5s
build_img / doit	1m 29s
tests / style	9s
tests / pytest (3.11, mysql, mysql://root:root@127.0.0.1:8877/surface)	1m 21s
tests / migration_check	36s
tests / pytest (3.11, postgresql, psql://root:root@127.0.0.1:8878/surface)	1m 9s
testscleanup / cleanup_artifact	4s
integration / doit	1m 33s
	6m 26s

Provide feedback