fix: replace npm install with npm ci (20260615-141322) (#762)

fix: use lockfile-aware install commands

Co-authored-by: securityeng-bot[bot] <219863240+securityeng-bot[bot]@users.noreply.github.com>

vuejs/vuejs/Dockerfile

@@ -9,7 +9,7 @@ COPY . .
 RUN yarn global add @vue/cli
 COPY .npmrc .
 COPY .yarnrc.yml .
-RUN yarn install
+RUN yarn install --immutable
 ENV HOST=0.0.0.0
 CMD ["yarn", "run", "serve"]