ci(ci): ignore scripts

[Fdawgs]

Add the --ignore-scripts arg to disable the execution of any scripts by third-party packages.

See https://snyk.io/blog/npm-security-preventing-supply-chain-attacks/

Checklist

• commit message and code follows the Developer's Certification of Origin
  and the Code of conduct

[changeset-bot]

⚠️ No Changeset found

Latest commit: 4a06904

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[netlify]

✅ Deploy Preview for agitated-mahavira-26f8f9 canceled.

Name	Link
🔨 Latest commit	4a06904
🔍 Latest deploy log	https://app.netlify.com/sites/agitated-mahavira-26f8f9/deploys/6818b7d37df7a50008dd6505

[onlywei]

I think we can get this for free by upgrading to pnpm 10.x