ci: improvements and maintenance

[drptbl]

Changes:

• updated docker containers to use latest node version (14.17.6) and npm (7.23.0)
• use codecov uploader instead of bash script which is deprecated
• added job-audit before job-prepare with two additional steps:
  • npm audit which will fail the whole workflow only if there is critical vulnerability detected in dependencies (npm install will never be triggered in this case increasing security)
  • lockfile-lint which makes sure that lockfile is up to date and has no malicious stuff inside
• updated base runner ubuntu image to use the latest
• improved caching of node dependencies
• updated codechecks dependency
• increased timeout for integration tests
• fixed codecov github checks which were missing in PRs

New workflow:

side note:
job-fork-tests is also failing on develop branch, so it's not related to my changes.

[codecov]

Codecov Report

Merging #1510 (b88518d) into develop (105a4b5) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff            @@
##           develop    #1510   +/-   ##
========================================
  Coverage    95.21%   95.21%           
========================================
  Files           76       76           
  Lines         1733     1733           
  Branches       557      557           
========================================
  Hits          1650     1650           
  Misses          83       83           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 105a4b5...b88518d. Read the comment docs.