chore: use `npm ci` for deployment, not `npm install`

[EvanHahn]

npm ci is slightly better for deployments than npm install.

• It ensures all installed packages match package-lock.json.
• It automatically removes node_modules/ if it exists, ensuring a clean slate.
• It won't update package.json or package-lock.json.

Not a huge difference, but recommended for deployments.