fix: use lockfile-aware install commands (#298)

Co-authored-by: securityeng-bot[bot] <219863240+securityeng-bot[bot]@users.noreply.github.com>

Author: securityeng-bot[bot]

.github/workflows/test-extension.yml

@@ -13,6 +13,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
-      - run: npm install
+      - run: npm ci
       - run: npm run build
       - run: npm run test