ci: enforce ignore-scripts policy for Node package managers

vuejs/vuejs/Dockerfile

@@ -7,6 +7,8 @@ WORKDIR /project
 COPY . .
 
 RUN yarn global add @vue/cli
+COPY .npmrc .
+COPY .yarnrc.yml .
 RUN yarn install
 ENV HOST=0.0.0.0
 CMD ["yarn", "run", "serve"]