Investigate use of unpinned `npm install -g` and `npx --yes` in CI pipelines

CI builds should be deterministic and repeatable. Use of `npm install -g` and `npx --yes` violate deterministic builds by installing latest versions of packages and their dependencies.

Search the CI pipelines for uses of `npm install -g` and `npx --yes`, then record which packages and versions each command installs. Review how those dependencies are currently resolved and identify the changes needed for deterministic, repeatable builds; done means all relevant uses have a clear resolution.

Written by the indexing model from the issue text.