added --ignore-scripts for all npm/yarn installs

[jkosanam]

A widespread ongoing NPM supply-chain attack is exploiting the preinstall lifecycle phase to execute malicious code during package installation. Disabling lifecycle scripts prevents any untrusted or compromised packages from executing arbitrary code during npm install / yarn install.

These scripts can:

1. Execute harmful code on your machine or CI/CD servers
2. Create unauthorized GitHub workflow files (.github/workflows/discussion.yaml)
3. Potentially steal tokens, modify repos, inject malware, etc.

Made changes to use npm install --ignore-scripts instead of regular installs.
This prevents execution of preinstall/postinstall lifecycle scripts as part of the ongoing NPM supply-chain security incident.

https://do-internal.atlassian.net/browse/SERVERLESS-3668

[vrindavinod-do]

Please share the ticket/context of the security ticket

[jkosanam]

We don't have any ticket for this. It came as an announcement mail. Added more context in the PR description.