non repeatable builds where node is used

### Jenkins and plugins versions report

Environment

```text
Paste the output here
```

### What Operating System are you using (both controller, and any agents involved in the problem)?

N/A

### Reproduction steps

1. clone a project that is using some node modules as part of its builds
2. build the project (inspect the package-lock.json file and archive it
3. wait an amount of time for newer packages to be available
4. clean the project (git clean -fdx)
5. build the project
6 compare the 2 package-lock.json files

### Expected Results

they are identical, any build can be cloned from SCM and the rebuilt by using defined versions of dependencies

### Actual Results

there are changes. builds in CI and locally use the latest that they resolve

### Anything else?

the build is using `npm install` and not `npm ci`

the pom should be configured to use `npm ci` by default and if/when things are updated a developer should run `npm install` locally and then commit the changes to the `package-lock.json`

see https://github.com/jenkinsci/bom/pull/2121#issuecomment-1571752616 and https://github.com/jenkinsci/bootstrap5-api-plugin/pull/220