ci: add npm audit job

[jooola]

Ensure we do not use packages that have known vulnerabilities.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.72%. Comparing base (cde7c2e) to head (ccf231f).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #320   +/-   ##
=======================================
  Coverage   78.72%   78.72%           
=======================================
  Files           4        4           
  Lines          47       47           
  Branches        8        8           
=======================================
  Hits           37       37           
  Misses          6        6           
  Partials        4        4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.