fix(security): harden .npmrc with supply-chain directives [APS-19381]

- Add ignore-scripts, strict-ssl, save-exact, engine-strict,
  legacy-peer-deps=false, audit-level=high
- Preserve existing package-lock=true
- Public repo: access=restricted intentionally omitted

Resolves: APS-19381

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Rohan Nagariya

.npmrc

@@ -1 +1,7 @@
 package-lock=true
+ignore-scripts=true
+strict-ssl=true
+save-exact=true
+engine-strict=true
+legacy-peer-deps=false
+audit-level=high