npm: Lockfiles & Build Workflows

Practice reproducible installs, package scripts, dependency intent, semantic versions, and deployable build output.