fix: add cloud lock file so jsQR is included in production build

CI was using stale package-lock.json that didn't match package-cloud.json,
causing jsQR to be missing from the built bundle. The in-app QR scanner
was silently failing because the library wasn't loaded.

Author: Ravi Singh

.github/workflows/deploy-cloud.yml

@@ -31,7 +31,8 @@ jobs:
         working-directory: pwa
         run: |
           cp package-cloud.json package.json
-          npm install
+          cp package-cloud-lock.json package-lock.json
+          npm ci
 
       - name: Build frontend
         working-directory: pwa