ci: Ensure JS lockfile up to date

[kylebarron]

I validated in the second commit that npm ci will fail if the package-lock.json is out of sync. Running npm ci fails with:

npm error `npm ci` can only install packages when your package.json and package-lock.json or npm-shrinkwrap.json are in sync. Please update your lock file with `npm install` before continuing.

Closes #926