fix(security): run npm ci with --ignore-scripts to avoid malicious scripts

Author: jcchavezs

.github/workflows/tests.yaml

@@ -18,7 +18,7 @@ jobs:
                 node-version: '22'
 
             - name: Install dependencies
-              run: npm ci
+              run: npm ci --ignore-scripts
 
             - name: Run Vitest
               run: npx vitest run
@@ -36,4 +36,4 @@ jobs:
                 name: playwright-traces
                 path: playwright-report/**/trace.zip
 
-        
+