fix(security): run npm ci with --ignore-scripts to avoid malicious scripts

Author: jcchavezs

.github/workflows/production.yaml

@@ -19,7 +19,7 @@ jobs:
                 node-version: '22'
 
             - name: Install dependencies
-              run: npm ci
+              run: npm ci --ignore-scripts
 
             - name: Run Vitest
               run: npx vitest run