ci: use corepack to pin npm 11.13.0, avoid self-upgrade race

`npm install -g npm@11.13.0` hits a known self-upgrade race on the
GitHub-hosted ubuntu and macos runners: the in-flight npm 10 process
tries to require modules that the new npm 11 has already overwritten,
producing `Cannot find module 'promise-retry'` partway through
reify-output. Corepack sidesteps this by managing npm via its own
shim instead of overwriting Node's bundled npm.

`corepack enable npm` is required because `corepack enable` alone
only shims yarn/pnpm.

Author: Rinse12

.github/workflows/CI-build.yml

@@ -35,7 +35,7 @@ jobs:
           node-version: 22
           cache: 'npm'
           registry-url: 'https://registry.npmjs.org'
-      - run: npm install -g npm@11.13.0
+      - run: corepack enable npm && corepack prepare npm@11.13.0 --activate
 
       # build dist folder
       - run: npm ci

.github/workflows/CI.yml

@@ -46,7 +46,8 @@ jobs:
         with:
           node-version: 22
           cache: 'npm'
-      - run: npm install -g npm@11.13.0
+      - run: corepack enable npm && corepack prepare npm@11.13.0 --activate
+        shell: bash
 
       - name: Smoke test Docker deps stage
         if: matrix.os == 'ubuntu-latest'

Dockerfile

@@ -2,7 +2,7 @@
 FROM node:22-slim AS builder
 
 RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates python3 make g++ && rm -rf /var/lib/apt/lists/*
-RUN npm install -g npm@11.13.0
+RUN corepack enable npm && corepack prepare npm@11.13.0 --activate
 
 WORKDIR /app
 
@@ -23,7 +23,7 @@ RUN --mount=type=secret,id=github_token \
 FROM node:22-slim AS deps
 
 RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates python3 make g++ && rm -rf /var/lib/apt/lists/*
-RUN npm install -g npm@11.13.0
+RUN corepack enable npm && corepack prepare npm@11.13.0 --activate
 
 WORKDIR /app