ci: pin npm to 11.13.0 in CI workflows and Dockerfile

The lock file is generated locally with npm 11, which prunes optional
peer-dep entries that npm 10 (bundled with node:22-slim and the npm
shipped with setup-node@v4) still records. After bumping pkc-js to
0.0.25, this caused `npm ci` to fail on all three matrix runners and
the Docker deps smoke build with:

  Missing: @types/react@19.2.14 from lock file

Pinning CI to npm 11.13.0 (matching the local install) keeps the lock
file authoritative without having to regenerate it under an older npm.

Author: Rinse12

.github/workflows/CI-build.yml

@@ -35,6 +35,7 @@ jobs:
           node-version: 22
           cache: 'npm'
           registry-url: 'https://registry.npmjs.org'
+      - run: npm install -g npm@11.13.0
 
       # build dist folder
       - run: npm ci

.github/workflows/CI.yml

@@ -46,6 +46,7 @@ jobs:
         with:
           node-version: 22
           cache: 'npm'
+      - run: npm install -g npm@11.13.0
 
       - name: Smoke test Docker deps stage
         if: matrix.os == 'ubuntu-latest'

Dockerfile

@@ -2,6 +2,7 @@
 FROM node:22-slim AS builder
 
 RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates python3 make g++ && rm -rf /var/lib/apt/lists/*
+RUN npm install -g npm@11.13.0
 
 WORKDIR /app
 
@@ -22,6 +23,7 @@ RUN --mount=type=secret,id=github_token \
 FROM node:22-slim AS deps
 
 RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates python3 make g++ && rm -rf /var/lib/apt/lists/*
+RUN npm install -g npm@11.13.0
 
 WORKDIR /app