Housekeeping: fix additional Scorecard issues
- chore: 🔒 add npm lockfile for reproducible builds (d5ed562)
- chore: 🙈 stop ignoring npm lockfile (d16b65f)
- chore: 🔒 update npm lockfile (0185354)
- ci: 🔐 add main-release artifact attestation step (2852f80)
- build: 👷 add release-it packages (05e2c93)
- ci: 👷 allow release-it with non-clean working dir (d26d135)