ui: add ignore-scripts=true to npmrc

[ngxson]

Overview

add ignore-scripts=true to .npmrc

this avoids automatically running preinstall/postinstall/prepare during npm install, which may make things a bit safer

NOTE:

• this is NOT a fail-safe solution, a malicious script can still be triggered via npm run dev or npm run build, but this limits to build time packages only (so, still reduce the attack surface)
• I tested the change with dev and build script and things still work correctly
• I asked AI to scan for how our dependencies are using it, and turns out none of them have preinstall or postinstall

Requirements

• I have read and agree with the contributing guidelines
• AI usage disclosure: for validation, as mentioned above